ISO 27701

What is ISO 27701

ISO 27701 is a framework for data privacy that builds on ISO 27001. It offers organisations guidance on how to comply with data protection law.

In recent years there has been a rise of data protection legislation around the world, including the GDPR in the EU, POPIA in South Africa, LGPD in Brazil and more. This has caused a growing need for a code of conduct to demonstrate data protection compliance and certification. ISO27701 was developed to act as this standard on the international stage.

The existence of this standard allows organisations to demonstrate to consumers, third parties and stakeholders that they have the appropriate policies and procedures in place to keep personal data secure and comply with international data protection laws.

To further help its goal, the standard also establishes the parameters for a Privacy Information Management System (or PIMS), outlining operational checklists against which organisations can document their compliance to make it easier for them to demonstrate their compliance.

How We Work:

Mondas’ consultants have the expertise necessary to help organisations certify to ISO 27701. This could include internal assistance to help get appropriate policies and procedures in place or a formal Data Protection gap analysis and project plan.

When helping organisations to comply with the standard, our team will generally undertake the following process:

Assessing:
To begin, our consultants will review your current data protection practices and compliance status as well as any potential risks present, through:

A discovery exercise to identify your processing activities.
Conducting a gap analysis against ISO 27701
Review your policies and procedures
Conduct interviews to gather information from relevant employees assessments and threat modelling.

Strategising: We will develop a specialised strategy for implementing ISO 27701 within your organisation. This will include:

Establishing objectives and the scope of the project.
Identifying and prioritising areas in need of improvement.
Developing a roadmap for compliance with the standard.
Assigning responsibilities to relevant staff.

Operationalising and Monitoring: Here we will focus on integrating ISO 27701 into your organisation’s everyday operations. This involves:

Implementing privacy controls based on ISO 27701 guidelines.
Conducting training programs to raise awareness among employees.
Establishing effective mechanisms for future monitoring of performance.
Establish incident response and breach notification procedures.

Evaluating and Improving: Our consultants will evaluate the effectiveness of these implemented controls and identify any areas for improvement, these steps include:

Establish a process for conducting regular reviews to measure the effectiveness of the controls.
Monitoring changes in regulatory requirements and adapting the privacy program in response.
Ensuring there are corrective measures ready to address any non-conformities.
Involve management in reviewing the overall effectiveness of the privacy program and making strategic decisions taking it forward.

Book a consultation

Book a consultation with one of our experts to understand how our team can help your business prepare for certification…

Book a Consultation

Key Benefits of Certifying to ISO 27701:

There are many benefits derived from certifying to ISO 27701. The main advantages include:

Privacy Management: – An ISO 27701 certification will provide your organisation with a better standard of data protection and ensure you remain compliant with relevant regulations such as the GDPR.

Compliance: – Certifying to the standard demonstrates your commitment to data protection which will provide your customers and regulators with assurance that you take your obligations seriously.

Reputation: – Reputation: This demonstration of your dedication to the safe and secure handling of personal data will improve your reputation among relevant customers and regulators.

Reputation: – ISO 27701 helps identify and mitigate privacy risks reducing your chances of having any incidents or breaches occur.

Why You Should Choose Mondas:

Flexible Resource

Our consultants will work to meet your needs as and when they come, regardless of their complexity. Our service offers capabilities across all compliance domains; from internal assistance which aids a resource gap, to formal GAP assessments and project plans, we will be here to help. Whether it’s a short or long term engagement, we will be able to step in and drive the process for you, saving you the time and money it takes to hire your own internal team.

Skilled Staff

Our compliance services utilise only the most highly experienced and accredited consultants to step in and assist your business in preparing for certification. We will ensure that the individual we assign to your team is well equipped to manage your specific needs, meaning you can be confident in our ability to successfully support your certification process.

Specialist Support:

Our GRC team has a rich wealth of experience working as consultants for a wide range of organisations across a huge variety of industries. This means that they are highly attuned to the different challenges and obstacles which are currently facing businesses like yours. Accordingly, you can be confident in their ability to offer relevant and informed support throughout your certification process.

Cost Effective

Mondas is committed to providing advanced cybersecurity solutions at price points that work for all businesses. This means we will tailor our compliance services to align with your budgetary constraints without compromising; we provide protection using expert consultants and leading technology in every engagement.

Tailored Solutions

Our services are fully adapted to the needs of each client. Each business boasts an entirely unique portfolio of factors which must be considered when creating an effective ISMS. This means it is crucial for our consultants to offer tailored advice to support the creation of a compliant system. We will assign a dedicated consultant to your business, which will ensure that the individual you work alongside has a comprehensive understanding of your business and its compliance requirements.