Certification ISO 27701

Certification ISO/IEC 27701 Security Techniques - Privacy Information Management

Target Group

Any organization that is certified with ISO/ IEC 27001 and has to manage the security of assets, financial or other information, intellectual property and details of its employees / clients / partners / suppliers / shareholders (entrusted by third parties), needs to take reasonable measures to comply with data protection laws and has to acquire ISO 27701.
Where the security of personal data is critical and decisive for the survival of the company, the acquisition of ISO/IEC 27701 is considered necessary, in order to document to customers/partners/suppliers/shareholders the proper management and security of information and personal data.
Such organizations are Banks, Hospitals, Insurance Companies, etc.

What is ISO 27701

ISO / IEC 27701: 2019 (formerly known as ISO / IEC 27552) is a privacy extension to ISO / IEC 27001 and ISO / IEC 27002 and one of the most necessary standards, regarding to Information Security and Privacy Management.

ISO 27701 provides the best implementation of legislation. Both it and GDPR, require organizations to take of measures so as to ensure the privacy of any personal data that they process.

However, neither piece of legislation provides much guidance on what those measures should look like. The ISO and the IEC (International Electrotechnical Commission) have therefore developed this new standard to provide that guidance.

It specifies the requirements for a PIMS (privacy information management system) and provides guidance for establishing, implementing, maintaining and continually improving.

It is also based on the requirements, control objectives and controls of ISO 27001, and includes a set of privacy-specific requirements, controls and control objectives.

ISO 27701 aims to optimize the existing Information Security Management System (ISMS) in order to offer an international approach to the Protection of Personal Data.

In the modern times it comes as a legal necessity and generator of development in man's life and the evolving world of technology.

Certification Process / Required documents

The company that is interested in being certified according to the requirements of the ISO 27701 Standard is kindly requested to contact the BQC and complete the certification application.

Why choose BQC

BQC is accredited by the Hellenic Accreditation System (ESYD) and issues internationally recognized Certificates. BQC cooperates with experienced inspectors and experts from all over the world, ensuring the most updated and professional knowledge in any business sector.

The benefits are

Information Security is an issue that has become a key part of effective privacy management.
Prevents companies from problems and improves the system itself.

The organization makes a strong commitment to the client / partner and gains his trust, specifically in terms of personal data protection.

Facilitates the company communication between partners/clients, concerning to the management of sensitive personal information.
Dissemination of personal information can be avoided.

Indicates that the organization has already taken all the appropriate and necessary measures, to comply in its corporate and legal obligations, concerning to data protection and privacy.