Cloud security is that area of IT security which wasn’t covered by the 2013 edition of ISO 27001. This is now a part of ISO 27001:2022 thereby, raising the bar of ISMS standards for organizations using cloud services.