Privacy: Fundamentally Right? Standards: Fundamental Requirement
summary
ISO/IEC 27701 extends 27001 into a Privacy Information Management System that maps specific controls to GDPR, Hong Kong PDPO, Australia, Singapore and South Korea and to the NIST privacy framework, enabling one audit to potentially satisfy multiple laws. Certification follows an auditor scheme defined in ISO/IEC 27006 part 2, auditors familiar with 27001 can audit 27701, and the free data protection mapping project shows control-to-law mappings. Publication took about three years.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 2:10Why ISO
- 3:03Why Privacy
- 4:37International Standards
- 6:59Why 27701
- 9:23What is 27701
- 12:18History of ISO 27701
- 14:42ISO 27701 Certification
- 17:53Benefits
- 19:15Whats Next
- 22:59Data Protection Mapping Project
- 27:51Summary
related talks
50mPrivacy Standards in the Context of Information Security
16mCache-22: Doing Privacy Engineering with Privacy Standards
40mCompliance Made Easy—Simplify Your Approach to Privacy
01h 14mCitizen security vs. data security ...
01h 16mSecurity meets data protection: risk assessment, standards and certification
01h 01mAcademic sessions on data protection law and privacy
01h 15mDATA PROTECTION ENGINEERING: WHAT IS THE ROAD AHEAD?
01h 10mThe state of the art requirement for GDPR security measures.