ISO/IEC 27701

Privacy Information Management System (PIMS) extension to ISO/IEC 27001.

ISO/IEC 27701 extends an ISO 27001 ISMS with privacy-specific controls for controllers and processors, mapping cleanly to GDPR Articles 5–28. It enables a single audit cycle to evidence both information security and privacy obligations.

← Back to glossary