Skip to content

ISO 27018:2019 Readiness Advisory

Score your readiness for free, then turn the results into a plan in a 30-minute strategy call with Ivanka, co-founder of The Art of Service, which has trained 54,000+ professionals across 160+ countries.

41
Controls
13
Domains
26
Mapped Frameworks
International
Jurisdiction

Why work with Ivanka on ISO 27018:2019

The ISO/IEC code of practice for a public cloud provider acting as PII processor, second edition (2019), on the ISO/IEC 27002:2013 structure: public cloud PII guidance on 16 ISO/IEC 27002 controls and objectives (policy commitment and responsibility split, a PII contact, awareness of consequences, customer-managed access, compromised credentials, log-on for customer accounts, telling customers…

Compliance work stalls when it is treated as a checklist. Ivanka treats ISO 27018:2019 as a strategic decision: what matters most for your organisation, what to do first, and what your leadership team needs to understand. For 25 years she has built The Art of Service, whose compliance platform now covers 1,062 frameworks.

The free readiness assessment scores your organisation against the 41 controls across 13 domains of ISO 27018:2019. The strategy call turns those scores into priorities, including where work you have already done for other frameworks can be reused.

Relevant credentials

  • Bestselling author of cloud computing certification guides
  • Co-founder of The Art of Service, which has trained 54,000+ professionals across 160+ countries
  • MIT Entrepreneurial Masters Program graduate
  • EXIN Expert Panel member

What you get in 30 minutes

Gap Assessment Review

Ivanka reviews your ISO 27018:2019 readiness scores with you and agrees which gaps matter most. Specific to your results, not generic advice.

Implementation Roadmap

A clear, prioritised plan for addressing gaps across 13 domains: what you can build on from existing work and what needs new investment.

Cross-Framework Strategy

ISO 27018:2019 maps to 26 other frameworks. Ivanka shows you where one piece of work can count towards several requirements at once.

Domains covered in ISO 27018:2019

01Not extended by ISO/IEC 27018 (ISO/IEC 27002:2013 clauses carried in by the 2026-05 build)
02Annex A – Public cloud PII processor extended control set
03Introduction
04Operations security
05Access control
06Human resource security

Plus 7 additional domains. See the full assessment →

This is for you if

  • You need to achieve ISO 27018:2019 compliance but don’t know where to start or how to prioritise
  • You’ve been told you’re “compliant” but suspect gaps exist that haven’t been properly assessed
  • You manage compliance for organisations across every sector and need expert guidance, not generic templates
  • You want to leverage existing compliance efforts across multiple frameworks rather than starting from scratch
  • You need a strategic plan your leadership team and board will actually understand and support

Start with a free assessment. Then let's talk strategy.

Take the free ISO 27018:2019 readiness diagnostic. In 5 minutes you'll have a clear picture of where your gaps are. Then book the strategy call and Ivanka will help you decide how to close them.

Start your free ISO 27018:2019 assessment

Free · No login required · Results in 5 minutes

Or go directly to the $149 Report + Strategy Call