ISO/IEC 27017:2026 — Information security controls based on ISO/IEC 27002 for cloud services
Document status what the publisher asserts
final
No status read is recorded for this entry — this record has not read a publisher surface for it, which is a fact about this record and not about the publisher. A status read is recorded for 7 of 132 tracked entries, 5 of which banked a passage.
Evidence state what this record holds
verified by a person — a person checked this entry against the primary source on a recorded day
/api/v1/instruments.json.
What this record holds for this entry, rung by rung, each mark derived from a field, a count or a stored reading. Rungs in the order the record acquires them, from what an entry is to what has been checked about it. The order is fixed; a rung’s position says nothing about any entry.
✓ held — this record holds it, and the sentence beside it names what from · — nothing held — no reading of this rung is recorded — nobody has looked, which is not the same as looking and finding nothing · △ held in part — part of it is held, or it is held under a limit the sentence states
No rung on this entry carries a measured absence. That is not the same as every rung being held: 4 of the 12 rungs are marked as holding nothing, which records that no reading has run rather than that a reading found nothing.
Each term states what this record does for this entry and what it does not, derived from the entry’s own fields and its own series. It is a record of coverage, not a finding about the document.
decay_class This entry’s record is frozen, which takes it out of the verification queue and out of the unverified count. The reason its record carries is “paywalled stage tracked”.licence_class The text is restricted, so this record cites and links it and does not reproduce, excerpt or diff it.resolution_strategy Resolution is “metadata only”, which is the value that means no document is retrieved for this entry: what is fetched is a publisher surface about it.The test an entry is admitted under is published in full, with its negative limb and its worked examples, at the inclusion rule. What this record holds about THIS entry's admission is below, each line naming the store it was read from.
Filed core. For that label this archive undertakes to put an entry's status to a person. The label records what this archive undertakes for a class of entries. It states no finding about this one, and it is not a ranking.
Frozen. The text is not public by licence, so it is not retrieved, hashed or diffed here. The publisher's own stage wording is quoted below, with the address it was read from. Why the text is not taken, and what is recorded instead.
Frozen does not mean abandoned. This entry is still fetched and hashed every day and its observation series continues; it is excluded only from the verification queue and from the unverified count, because a status that cannot be established is not outstanding work.
Resolution: metadata only · no document resolved
What this archive can and cannot establish about this entry. The text is not public by licence; the ISO catalogue entry offers it for purchase. No document is hashed; the publisher page fetched for this row is hashed as part of the observation series; the publisher's own catalogue metadata is tracked instead. The catalogue entry was served to an identified client only through a browser engine — plain HTTP returned 403 from this host on 2026-08-08.
Recorded as final against the primary source on 8 August 2026.
The text that supported that record, retrieved — by unknown:
Status : Published Stage : International Standard published [ 60.60 ]
The text of this document is published under a restrictive licence. It is cited and linked, never excerpted; change is reported by hash.
Each format carries the permalink and the date this consensus standard was observed. The observation date is part of the citation: the underlying source may have changed since.
GxPlex. ISO/IEC 27017:2026 — Information security controls based on ISO/IEC 27002 for cloud services [consensus standard record]. Observed 19 September 2026. https://gxplex.com/r/iso-iec-27017-2026 Primary source: https://www.iso.org/standard/82878.html
@misc{gxplexrisoiec270172026,
author = {{GxPlex}},
title = {{ISO/IEC 27017:2026 — Information security controls based on ISO/IEC 27002 for cloud services}},
year = {2026},
note = {consensus standard record, observed 19 September 2026},
howpublished = {\url{https://gxplex.com/r/iso-iec-27017-2026}},
urldate = {2026-09-19},
url = {https://www.iso.org/standard/82878.html}
} GxPlex. (2026). ISO/IEC 27017:2026 — Information security controls based on ISO/IEC 27002 for cloud services [consensus standard record]. Retrieved 19 September 2026, from https://gxplex.com/r/iso-iec-27017-2026
{
"@context": "https://schema.org",
"@type": "Dataset",
"name": "ISO/IEC 27017:2026 — Information security controls based on ISO/IEC 27002 for cloud services",
"publisher": "GxPlex",
"url": "https://gxplex.com/r/iso-iec-27017-2026",
"temporalCoverage": "2026-09-19",
"observation": {
"url": "https://gxplex.com/observations/iso-iec-27017-2026#obs-2026-09-19-1",
"observedDate": "2026-09-19"
},
"isBasedOn": "https://www.iso.org/standard/82878.html"
} observation.url addresses the single observation this
citation rests on.
Every observation of this document is addressed and separately citable at the observation series.
Observed on 86 occasion(s) since 2026-08-08. 22 produced a content hash. No change to the retrieved text has been detected since observation began.
·×××···××·×××··××··××·×××××··××××·×××··×·×·×××××××·××××××·××·××××××××·××·××××××××·····
All 86 marks, one per observation, oldest first. · unchanged · ! content changed ·
~ fetched but rendered client-side, no hash ·
× could not be fetched, no hash.
42 of 43 days from 2026-08-08 to 2026-09-19 hold an observation. 1 day holds none: 2026-09-14. A day with no observation is a day this record did not reach; it is not a statement about the publisher, and it is not counted as unchanged.
Each mark links to the single observation it stands for, at
that observation’s own address. The whole series, with every address, is at /observations/iso-iec-27017-2026.
Any two of its retained observations can be set side by side at /compare/iso-iec-27017-2026.
The same evidence as a packet, with its refusals and its
integrity reference, is at /packet/iso-iec-27017-2026.
Every observation in this series is published, untruncated, at /api/v1/observations.json.
2026-09-19·1. /observations/iso-iec-27017-2026 — every record of this row, with its address. /api/v1/series.jsonl — the same records for every row, one line each.
Each observation is addressed by this row’s identifier, the date it was observed, and its sequence within that date — the same key /api/v1/series.jsonl publishes as `sequence`, counted in the order the store recorded them. Counts and dates over a stated window. No figure here is a mark out of a hundred, no cell is ordered against another, and none of it is a statement about the publisher: a day this record did not reach is a fact about this record’s reach.
blocked ×59. Of those, 22 produced a digest: a
page that answers and is assembled in the browser answers
without one. withheld. What that record returned is in Observation history above.
https://www.iso.org/standard/27017 22 record(s), 2026-08-08 to 2026-09-05What sits around this entry, counted. Every figure below is drawn from a value already rendered elsewhere on this page; where a count has a list, the count is here and the list stays in the section holding its evidence.
| Window | Observations of the document | Of those, carrying a digest | Of those, carrying a change | Direct document | Official signals dated inside it |
|---|---|---|---|---|---|
| 30 calendar days | 44 | 6 | 0 | no change in window | 0 of 0 |
| 90 calendar days | 86 | 22 | 0 | no change in window | 0 of 0 |
| 365 calendar days | 86 | 22 | 0 | no change in window | 0 of 0 |
A window is marked changed where at least one observation of the document inside it recorded a change against the previous one; unchanged where the window holds at least one such observation, at least one of them carries a digest of the retrieved bytes, and none recorded a change; undigested where the window holds observations and none of them carries a digest, so no observation in it could be compared with another; and unmeasured where the window holds no observation at all. The word is shorthand for the three counts printed beside it and adds nothing to them. It is a statement about the window and never about the document outside it, which is why a window reaching back before the first observation says so underneath. A mark is derived from the observations a window holds and never from the days it spans; which days inside this entry’s own window hold none is stated by the coverage sentence in Observation history above.
The first observation of the document this entry names is . These windows reach back before it — 90 calendar days · 365 calendar days — so part of the span each names was never watched, and a window with no change inside it says nothing about the days before that first observation.
no change in window — this window holds observations of the document and none of them recorded a change — which is a statement about the window, not about the document outside it
No word is attached to the signal count beside it, and none will be. Any word for the size of a count needs either a threshold this record would have authored or a comparison against other entries that would rank the sources against one another; the count and its window are the whole claim. The document column beside it carries a word only because the rule reaching it is printed underneath and can be checked against the counts it stands for.
The last column holds no member on this entry. The zero it holds is named under “Around it” below.
topic.information-security. Next holds the publisher-dated facts this record already carries that fall after the day this record calls today — a stated effective date, a consultation close. Nothing is projected and no step is inferred from a lifecycle: where a publisher has stated no further date, the cell says so, and what is absent is a statement rather than a future.
The words this document uses about itself, matched verbatim against its own title. Not a statement of scope, and not a judgment about which organisations or products fall under it: each value quotes the span it was read from and links to where that span was read.
Listed primary first, then the further addresses this record holds for this entry, then the route it was found by, then dated third-party copies. Repeated URLs appear once, at their first position.
A field and some words a reader may keep beside this entry while reading it. This record never sees the note: nothing is sent anywhere, nothing is stored on this device, and it is gone when the page is reloaded. Nothing below is selected until a reader selects it — no default is offered here, and this record states no view about which of the four words belongs on this entry.
Those four words are a reader's own vocabulary, not this record's description of the document. A judgement of consequence, a decision to keep watching, a decision to look further and a decision to raise are refused in this record's own voice by the wall it publishes under, and that refusal is why the choice sits with a reader rather than being made here.
The copy control puts the note on this device's clipboard as Markdown,
carrying this entry's identifier and the four published addresses of its
evidence packet at /packet/iso-iec-27017-2026, so a note and
the packet it belongs beside can be filed together. The note is not merged
into the packet's own bytes: merging needs either a request this control
does not make, or a copy of a published surface inside every entry page,
and neither is taken.
Last updated: