ISO 17789 – Cloud Computing Reference Architecture


ISO 17789 Cloud Computing Reference Architecture document lays out a common terminology framework that assists in communicating about roles and responsibilities.

  • defines cloud computing responsibilities
    • customer activities:
      • use cloud services
      • Perform service trials
      • Monitor services
      • Administer service security
      • Provide billing and usage reports
      • Handle problem reports
      • Administer tenancies
      • Perform business administration
      • Select and purchase services
      • Request audit reports
    • provider activities
      • prepare systems and provide cloud services
      • monitor and administer services
      • manages assets and inventories
      • provide audit data
      • manage customer relationships and handle customer requests
      • perform peering with other CSPs
      • ensure compliance
      • provide network connectivity
      • many others
    • partner activities
      • design, create, and maintain services
      • test services
      • perform audits
      • set up legal agreements
      • acquire and assess customers
      • assess the marketplace
  • aligns to the Cloud Controls Matrix (CCM)
    • outlines cloud security controls