Privacy / ISO 27701
Extend ISO 27001
to privacy.
ISO/IEC 27701 adds a privacy management system on top of ISO 27001. We get you ready for the certification audit.
What it requires
What 27701
adds.
A privacy management system
Privacy controls layered onto your existing ISO 27001 system.
Roles as controller and processor
Clear duties for the data you control and the data you process for others.
Privacy risk assessment
Assessments for the processing that carries the most risk.
Records and rights
Processing records and a rights process, aligned to the law.
How we get you there
From ISO 27001
to 27701.
Check your base
We confirm your ISO 27001 system and find the privacy gaps.
Add the privacy layer
Privacy controls, records and a rights process, mapped to 27701.
Operate it
The privacy management system runs alongside your security system.
Keep it audit ready
Internal audits and evidence, ready for the certification body.
Packages
One package,
two standards.
We run ISO 27001 and 27701 together so the shared controls are built once.
See packagesIndependence
We prepare you and run internal audit. An accredited certification body issues the ISO certificate, not Kensara.
Questions
ISO 27701, in your words.
Do we need ISO 27001 first?
Yes. ISO 27701 extends a 27001 system. We can run both together if you do not have 27001 yet.
Do you issue the certificate?
No. We prepare you and run internal audit. An accredited certification body issues the certificate.
Privacy. Security. Intelligence.
Built for trust.
Tell us what you need to prove. We reply within one working day.