ISO 27701 Privacy Information Management

There are three steps to help you help you gain an introduction to ISO/IEC 27701 requirements and privacy information management certification.

Here we start with step 1: requirements.

Do you have an ISO/IEC 27001 Information Security Management System already in place? If yes, you’re ready to get started with ISO/IEC 27701. 

The guidance and requirements for ISO/IEC 27701 Privacy Information Management System (PIMS) go across 8 different clauses and 6 annexes, which include personally identifiable information (PII) controls and mappings to related standards and the GDPR.

It’s vital you understand all the guidance, requirements and controls and ensure they are appropriately implemented across your organization. Here is how you can get started with ISO/IEC 27701.

How do I navigate the guidance and requirements for ISO/IEC 27701?

First of all you need to buy a copy of the standard and read it; understand the content and how it will improve your business.

Make sure that you have buy-in from your leadership team. Read our free white paper on the importance of leadership to help get your teams on board.

Once you have the standard, understand the requirements and have gained leadership commitment, you’re ready to move onto Step 2 Implementing ISO/IEC 27701.