ISO 27701 Assessment

Ensure your privacy program meets requirements set by ISO 27701.

ISO 27701 specifies the requirements of a privacy information management system. It’s an extension of the standard ISO 27001, and offers a set of privacy-specific requirements, objectives and controls. Companies that leverage ISO 27001 can use ISO 27701 to extend security efforts to include privacy management activities such as processing of personal data or personally identifiable information. This can help to demonstrate compliance with data protection laws such as the GDPR.

TrustArc ISO 27701 Assessment

TrustArc consultants assess your privacy program against the ISO 27701 framework, and provide a prioritized, step-by-step implementation plan for efficiently managing information security systems.

The deep expertise of our privacy consulting team is augmented by the TrustArc Platform — powerful technology that ensures the assessment is comprehensive, complete and accurate.

The TrustArc Advantage

Powerful Technology - TrustArc
Proven Methodology - TrustArc
Privacy Expertise - TrustArc

Powerful Technology + Proven Methodology + Deep Expertise

The TrustArc Platform powers all solutions, combining:
9+ years of high scale operating experience
1,000s of successful customer engagements
20+ years of privacy industry experience

Our proven, 3-step process to develop a comprehensive ISO 27701 action plan:

Phase One

Assess Compliance

Assess compliance across all business units. Deliverables include a summary of gaps and remediation recommendations.

Phase Two

Develop Plan

Develop a prioritized action plan with specific remediation recommendations, schedule, and budget / resource estimates.

Phase Three

Build Consensus
Implement Programs

Custom review with key stakeholders to build awareness, and gain agreement on your action plan. Topics include gap & risk analysis, industry benchmarking, and resource plans.

Need help assessing alignment with ISO 27701?