BS ISO/IEC 27018:2014

Foreword
0 Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Overview
5 Information security policies
6 Organization of information security
7 Human resource security
8 Asset management
9 Access control
10 Cryptography
11 Physical and environmental security
12 Operations security
13 Communications security
14 System acquisition, development and maintenance
15 Supplier relationships
16 Information security incident management
17 Information security aspects of business
   continuity management
18 Compliance
Annex A (normative) - Public cloud PII processor extended
        control set for PII protection
Bibliography

Defines guidelines based on ISO/IEC 27002, taking into consideration the regulatory requirements for the protection of PII which might be applicable within the context of the information security risk environment(s) of a provider of public cloud services.