Of these three ISO standards, ISO 27001 is the main standard for information security management. ISO 27017 is an addition for cloud computing and it covers additional aspects of information security measures specifically for the cloud computing industry. ISO 27018 is for the protection of personally identifiable information (PII).