Skip to content

ISO/IEC 27018:2025 Readiness Advisory

Score your readiness for free, then turn the results into a plan in a 30-minute strategy call with Ivanka, co-founder of The Art of Service, which has trained 54,000+ professionals across 160+ countries.

38
Controls
6
Domains
–
Mapped Frameworks
International
Jurisdiction

Why work with Ivanka on ISO/IEC 27018:2025

The ISO/IEC code of practice for a public cloud provider acting as PII processor, third edition (August 2025), realigned to ISO/IEC 27002:2022: public cloud PII guidance on 13 ISO/IEC 27002:2022 controls (policy and responsibility split, PII contact, media transfer records, compromised credentials and customer-managed access, breach determination, independent evidence, awareness, disposal…

Compliance work stalls when it is treated as a checklist. Ivanka treats ISO/IEC 27018:2025 as a strategic decision: what matters most for your organisation, what to do first, and what your leadership team needs to understand. For 25 years she has built The Art of Service, whose compliance platform now covers 1,062 frameworks.

The free readiness assessment scores your organisation against the 38 controls across 6 domains of ISO/IEC 27018:2025. The strategy call turns those scores into priorities.

Relevant credentials

  • Bestselling author of cloud computing certification guides
  • Co-founder of The Art of Service, which has trained 54,000+ professionals across 160+ countries
  • MIT Entrepreneurial Masters Program graduate
  • EXIN Expert Panel member

What you get in 30 minutes

Gap Assessment Review

Ivanka reviews your ISO/IEC 27018:2025 readiness scores with you and agrees which gaps matter most. Specific to your results, not generic advice.

Implementation Roadmap

A clear, prioritised plan for addressing gaps across 6 domains: what you can build on from existing work and what needs new investment.

Cross-Framework Strategy

How ISO/IEC 27018:2025 fits with the other obligations you already manage, so it strengthens your existing programme instead of running beside it.

Domains covered in ISO/IEC 27018:2025

01Annex A – Public cloud PII processor extended control set
02Introduction
03Organizational controls
04Technological controls
05People controls
06Physical controls

This is for you if

  • You need to achieve ISO/IEC 27018:2025 compliance but don’t know where to start or how to prioritise
  • You’ve been told you’re “compliant” but suspect gaps exist that haven’t been properly assessed
  • You manage compliance for organisations across every sector and need expert guidance, not generic templates
  • You want to leverage existing compliance efforts across multiple frameworks rather than starting from scratch
  • You need a strategic plan your leadership team and board will actually understand and support

Start with a free assessment. Then let's talk strategy.

Take the free ISO/IEC 27018:2025 readiness diagnostic. In 5 minutes you'll have a clear picture of where your gaps are. Then book the strategy call and Ivanka will help you decide how to close them.

Start your free ISO/IEC 27018:2025 assessment

Free · No login required · Results in 5 minutes

Or go directly to the $149 Report + Strategy Call