ISO/IEC 27018 is an international privacy standard that builds on ISO 27001 and ISO 27002, providing additional controls for public cloud service providers who process PII. Developed by the International Organization for Standardization (ISO), the standard focuses on risk management, trans