ISO 27017 is an extension of the ISO 27001 standard, which provides a framework for implementing an information security management system (ISMS). While ISO 27001 focuses on information security in general, ISO 27017 specifically addresses the unique security challenges of cloud computing.

Here is a story about the risks of looking for "free" shortcuts in a professional world. The Cost of Free