ISO/IEC 27701 is an extended version of ISO/IEC 27001 providing additional guidelines to manage personal information.
It specifically focuses on privacy, data protection and helping companies/organizations to follow certain security regulations and manage personal data efficiently.
- Built on ISO/IEC 27001, implementing secure management procedures into your company’s existing ISMS (Information Security Management System).
- Provide structured guidelines for managing sensitive data and ensure company complies with privacy regulations like GDPR (General Data Protection Regulation).
- Identifies, evaluates risks associated with processing sensitive data such as data involving personal information.
- Offers recommendations for developing and implementing policies and protocols to maintain privacy effectively.