ISO 27017 extends ISO 27001 with specific controls for cloud computing security, covering aspects such as identity management in cloud environments, data protection in transit and at rest on shared infrastructure, and the responsibility between cloud providers and customers. Italian companies certified to ISO 27017 demonstrate expertise in secure cloud service management and distributed workload protection.