1 Scope

This document provides a set of cybersecurity requirements for cloud services.

This document is applicable to organisations providing cloud services and their subservice organisations.