Article Details

Scrape Timestamp (UTC): 2025-07-14 05:20:19.251

Source: https://www.theregister.com/2025/07/14/iran_cloud_panel_evaluation/

Original Article Text

Click to Toggle View

Iran seeks at least three cloud providers to power its government. Despite loathing the USA, Iran wants providers who match NIST’s definition of cloud computing. The Information Technology Organization of Iran (ITOI), the government body that develops and implements IT services for the country, is looking for suppliers of cloud computing. The org recently posted a notification of its desire to evaluate, grade, and rank cloud players to assess their suitability to host government services. At the end of the exercise, the organization hopes to have a panel of at least three cloud operators capable of handling government services. The government agency will base its assessments on compliance with standards such as ISO 27017 and ISO 27018, which define controls for secure cloud computing and protection of personally identifiable information. ITOI also expects companies that participate in its evaluation to be compliant with the NIST SP 800-145 definition of cloud computing. Yes, Iran recognizes that NIST – the USA’s National Institute of Standards and Technology – despite regarding America as a trenchant enemy. ITOI has cast the net wide, by seeking cloud operators with the capacity to deliver IaaS, PaaS, or SaaS. Service providers that deliver private, public, hybrid or community clouds are also welcome, as are service providers who specialize in security, monitoring, support services, or cloud migration. Organizations that pass ITOI’s tests will earn a “cloud service rating certificate” that makes them eligible for inclusion on a list of authorized cloud services providers. The Register reminds readers that many jurisdictions have made doing business with Iran an offense. The story behind this story may also be of interest because The Register’s Asia-Pacific desk tracks ITOI’s RSS newsfeed, which for many months did not publish any updates. That changed after Iran closed its internet to prevent cyberattacks during the 12-day war with Israel and the USA. Once the conflict ended, the RSS feed sprang back to life.

Daily Brief Summary

MISCELLANEOUS // Iran Seeks Global Cloud Providers for Government Services

Iran is actively searching for a minimum of three cloud service providers to support government operations.

The Information Technology Organization of Iran (ITOI) intends to evaluate and rank cloud providers based on their ability to meet specific standards.

Compliance with ISO 27017 and ISO 27018, which ensure secure cloud computing and the protection of personally identifiable information, is required.

Providers must also adhere to the NIST SP 800-145 definition of cloud computing, despite Iran's adversarial relationship with the USA.

Cloud services sought include various forms such as IaaS, PaaS, SaaS, and options for private, public, hybrid, or community clouds.

Approved organizations will receive a “cloud service rating certificate” and be listed as authorized cloud service providers.

Companies involved in security, monitoring, support services, or cloud migration are also encouraged to apply.

International businesses should note that many jurisdictions consider trading with Iran illegal, potentially complicating participation.