NF ISO/IEC 27701

NF ISO/IEC 27701

October 2020
Standard Cancelled

Security techniques - Extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy information management - Requirements and guidelines

This document specifies requirements and provides guidance for establishing, implementing, maintaining and continually improving a Privacy Information Management System (PIMS) in the form of an extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy management within the context of the organization. This document specifies PIMS-related requirements and provides guidance for PII controllers and PII processors holding responsibility and accountability for PII processing. This document is applicable to all types and sizes of organizations, including public and private companies, government entities and not-for-profit organizations, which are PII controllers and/or PII processors processing PII within an ISMS.

See more
View the extract
Main informations

Collections

National standards and national normative documents

Publication date

October 2020

Number of pages

74 p.

Reference

NF ISO/IEC 27701

ICS Codes

35.030   IT Security

Classification index

Z74-246

Print number

1

International kinship

ISO/IEC 27701:2019
Sumary
Security techniques - Extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy information management - Requirements and guidelines

This document specifies requirements and provides guidance for establishing, implementing, maintaining and continually improving a Privacy Information Management System (PIMS) in the form of an extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy management within the context of the organization.

This document specifies PIMS-related requirements and provides guidance for PII controllers and PII processors holding responsibility and accountability for PII processing.

This document is applicable to all types and sizes of organizations, including public and private companies, government entities and not-for-profit organizations, which are PII controllers and/or PII processors processing PII within an ISMS.

Standard replaced by (1)
NF EN ISO/IEC 27701
April 2021
Standard Current
Security techniques - Extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy information management - Requirements and guidelines

<p>This document specifies requirements and provides guidance for establishing, implementing, maintaining and continually improving a Privacy Information Management System (PIMS) in the form of an extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy management within the context of the organization.</p> <p>This document specifies PIMS-related requirements and provides guidance for PII controllers and PII processors holding responsibility and accountability for PII processing.</p> <p>This document is applicable to all types and sizes of organizations, including public and private companies, government entities and not-for-profit organizations, which are PII controllers and/or PII processors processing PII within an ISMS.</p>

Table of contents
View the extract
  • 1 Domaine d'application
  • 2 Références normatives
  • 3 Termes, définitions et abréviations
  • 4 Généralités
  • 5 Exigences spécifiques au PIMS liées à l'ISO/IEC
    27001
  • 6 Recommandations spécifiques au PIMS liées à l'ISO/IEC
    27002
  • 7 Recommandations supplémentaires de l'ISO/IEC 27002 pour les responsables de traitement de DCP
  • 8 Recommandations supplémentaires de l'ISO/IEC 27002 pour les sous-traitants de DCP
  • Annexe A Objectifs et mesures de référence spécifiques au PIMS (responsables de traitement de DCP)
  • Annexe B Objectifs et mesures de référence spécifiques au PIMS (sous-traitants de DCP)
  • Annexe C Correspondance avec l'ISO/IEC
    29100
  • Annexe D Correspondance avec le Règlement général sur la protection des données
  • Annexe E Correspondance avec l'ISO/IEC 27018 et l'ISO/IEC
    29151
  • Annexe F Comment appliquer l'ISO/IEC 27701 à l'ISO/IEC 27001 et l'ISO/IEC
    27002
  • Bibliographie
ZOOM ON ... the Requirements department
To comply with a standard, you need to quickly understand its issues in order to determine its impact on your activity.

The Requirements department helps you quickly locate within the normative text:
- mandatory clauses to satisfy,
- non-essential but useful clauses to know, such as permissions and recommendations.

The identification of these types of clauses is based on the document “ISO / IEC Directives, Part 2 - Principles and rules of structure and drafting of ISO documents ”as well as on a constantly enriched list of verbal forms.

With Requirements, quickly access the main part of the normative text!

With Requirements, quickly access the main part of the normative text!
Need to identify, monitor and decipher standards?

COBAZ is the simple and effective solution to meet the normative needs related to your activity, in France and abroad.

Available by subscription, CObaz is THE modular solution to compose according to your needs today and tomorrow. Quickly discover CObaz!

Request your free, no-obligation live demo

I discover COBAZ