PII Controllers vs PII Processors in ISO 27701
Are you a PII controller, a processor, or both? Learn the difference in ISO 27701, why it determines which controls (Annex A vs Annex B) apply, and how to decide.
ISO 27701 Compliance Toolkits and Templates
ISO 27701 extends ISO 27001 to privacy information management (PIMS). Find our ISO 27701 compliance templates and guides for privacy governance — privacy policies, records of processing and data-subject procedures.
ISO 27701 and GDPR: How the Standard Supports Compliance
ISO 27701 helps operationalize GDPR through a certifiable privacy management system — records of processing, data subject rights, and a GDPR mapping. But certification is not legal compliance.
ISO 27701 and GDPR: How the Standard Supports Compliance Read More »
ISO 27701 and ISO 27001: How They Work Together
ISO 27701 extends ISO 27001 — it is not standalone. Learn how the privacy standard builds on the ISMS, what it adds, and why organizations certify to both.
How to Get ISO 27701 Certified: The Process
ISO 27701 certification step by step — the ISO 27001 prerequisite, determining your controller/processor role, extending the system, and the integrated audit.
ISO 27701 Requirements: The Complete Documentation Checklist
ISO 27701 documentation comes in two layers — your ISO 27001 ISMS plus privacy-specific documents. Here is the complete checklist of what the PIMS adds.
ISO 27701 Requirements: The Complete Documentation Checklist Read More »
ISO 27701: A Guide to Privacy Information Management
ISO/IEC 27701:2019 extends ISO 27001 to manage data privacy. Learn what a PIMS is, how it maps to GDPR, the controller/processor roles, and how to get certified.
ISO 27701: A Guide to Privacy Information Management Read More »