ISO 27018:2019
Annex A – Public cloud PII processor extended control set – ISO 27018:2019

ISO 27018:2019 A.11.13: Access to data on pre-used data storage space

Control: whenever storage space is allocated to a customer, the processor makes sure no data previously held there is visible to that customer. Guidance: when a user deletes data, performance may make explicit erasure impractical, leaving a risk that another user reads it, which specific technical measures must prevent. No single approach suits every case; one example is infrastructure, platforms or applications returning zeroes when a user reads space it has not yet written itself.

Maintained by Gerard Blokdyk

Other controls in Annex A – Public cloud PII processor extended control set – ISO 27018:2019

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.