Organizations increasingly need to prove to potential clients, business partners and regulators they can keep personal information (PI) secure and can comply with laws (e.g., CCPA, GDPR) that specify how PI is stored, handled and managed.
ISO 27701:2019 is a privacy extension to ISO 27001 that adds Privacy Information Management to your 27001 Information Security Management System (ISMS) … and out comes a Information Security & Privacy Management System (ISPMS)… yes, we made that up but it sounds good, right?
We are rapidly approaching a point where information security and privacy become indistinguishable. Moving forward, it may not be possible to be an information security professional without being a data privacy professional as well.
With all the extra work and expertise needed to address privacy concerns it may also not be possible to survive without a trusted system to manage data privacy risk.
ISO 27701 recognizes that privacy is indeed a different class of information with different treatment requirements, which an ISO 27001 ISMS on its own struggles to fully govern and protect. To address that issue, ISO 27701 updates two of ISO 27001’s seven clauses so the Information Security Management System also becomes a Privacy Information Management System (PIMS)… or as you have learned we have dubbed, an Information Security & Privacy Management System (ISPMS). To ensure you have the required controls to manage privacy-specific risks, ISO 27701 provides updates and additional guidance to the controls for 13 of the 14 Annex A domains.
Our ISO 27701 and 27001 consulting services help our clients strategize, build, and certify a robust and effective Information Security & Privacy Management System (ISPMS). Our team of experts brings extensive experience and privacy domain expertise to guarantee your privacy controls conform to the ISO 27701 standard.
Completing ISO 27001, then adding 27701 would cost roughly 40% more time and money than doing them at the same time.
Dedicated ISO 27001 & 27701 expertise will ensure you have the information, documentation and staff augmentation you need, when you need them.
Regular status/coordination meetings between our ISO 27001 & 27701 experts and your project team will keep your project moving forward. Our expertise, proven processes and standard-driven artifacts will streamline your conformance process.
Secureo ensures your success by validating that all your artifacts conform fully to the ISO 27001 & 27701 guidance.
We provide on-site support to ensure a smooth and successful certification audit, including privacy controls.
Secureo provides whatever ongoing support you need to operate your ISPMS, manage privacy risk, continually improve your privacy posture, implement your Internal Audit Program, and maintain your ISO 27701 conformance within the scope of your ISO 27001 certification.
Ignoring privacy risk would be like ignoring an incoming title wave. We can clearly see this coming from far away and deciding not to act would result in certain doom.
