OREL Cloud secures SL’s 1st ISO/IEC 27017 certification

OREL IT team with the certification

OREL IT announced a landmark achievement for Sri Lanka’s digital ecosystem: OREL Cloud has become the first local cloud provider in the country to be certified under ISO/IEC 27017. 

Recognised globally as the gold standard for cloud-specific information security, this milestone represents more than a technical accomplishment; it is a reflection of OREL IT’s deep commitment to building secure, compliant and future-ready cloud infrastructure.

With this certification, OREL Cloud delivers not only audited, globally benchmarked security controls but also the clarity and governance enterprises need to manage shared responsibility between the provider and customer, reducing the risk of gaps or missteps in cloud operations.

ISO/IEC 27017 expands upon the more widely known ISO/IEC 27001 standard by addressing risks unique to cloud environments. These include the protection of virtualised and multi-tenant setups, mitigating cloud-native threats such as misconfigurations, colocation vulnerabilities and third-party dependencies.  For sectors like banking, healthcare and government, where data sensitivity and regulatory oversight are especially high, this certification simplifies compliance with both local and international standards. It provides a trusted, secure foundation for digital transformation efforts, empowering organisations to scale without compromising control.

The certification also represents a strategic edge for businesses looking to meet international procurement criteria. Enterprises now have access to a platform that meets global cloud standards without defaulting to hyperscalers, all while benefiting from the agility and accountability of a local provider. OREL Cloud’s infrastructure is designed not only for today’s demands but also for tomorrow’s threats, with continuous security improvements baked into the platform, ensuring it evolves alongside the threat landscape.

“Security is more than compliance. It’s a continuous promise to every client we serve,” said OREL Cloud Chief Customer Officer Piumi Ranasinghe. 

“Achieving ISO/IEC 27017 is more than a validation of our controls. In fact, it reflects our proactive mindset. 

In a cloud-powered economy, enabling secure, scalable growth is how we build lasting partnerships, rooted in trust, built to endure and delivered without compromise.”

PayMedia and DirectPay Founder and CEO Kanishka Weeramunda remarked, “Partnering with OREL Cloud gives us confidence in a platform that’s not only locally hosted but internationally certified. ISO/IEC 27017 now elevates that assurance even further.”