ISO/IEC 27701:2019: An introduction to privacy information management

Introduction

Chapter 1: What is privacy information management?

Who does it matter to?

Where matters!

How is processing managed?

What is ‘personal information’?

Why is personal information being processed?

Chapter 2: What needs to be considered?

Chapter 3: ISO/IEC 27701 and the privacy information management system requirements

Documentation

Audit

Management review

Chapter 4: Legal, regulatory and contractual requirements and business risk

Applying PIMS controls

Chapter 5: Privacy information management controls

Extensions to ISO/IEC 27001 controls

Additional guidance aligned to ISO/IEC 27002

Conditions for collection and processing

Obligations to data subjects

Privacy by design and by default

Sharing, transfer and disclosure of personal information

Annexes in ISO/IEC 27701

Dealing with privacy information breaches

Compliance and audit

Chapter 6: Certification

Other audit applications

Chapter 7: Terms and definitions

Further reading

Best Regards,

Seo Rodríguez, MBA

CISSP, CRISC, CISM, CISA, CySA+, Security+, Pentest+, MCT, M365 Security, CCNA, VCP, ITIL, Network+ & A+

Mobile: 978-716-6129

https://certtoday.com/

https://www.linkedin.com/in/seolito/

Leave a comment