PRIVACY INFORMATION MANAGEMENT
ISO/IEC 27701 certification
Make responsibilities for personal information clear and auditable.
Prepare for ISO/IEC 27701 certification with practical advice and documentation tailored to your organisation. We help you connect the requirements to the way you work.
What can ISO/IEC 27701 do for your organisation?
ISO/IEC 27701 sets out requirements and guidance for a privacy information management system. It supports organisations acting as controllers or processors in identifying responsibilities and managing risks to personal information.
Map processing activities
Understand what personal information you process, why and in which role.
Assign responsibilities
Define who manages privacy risks, requests, incidents and external processors.
Choose proportionate controls
Select and document privacy controls that reflect the context and risks of processing.
Review privacy performance
Monitor controls, investigate issues and improve the system as activities change.
Documentation tailored to your organisation
We start with your activities, responsibilities and existing records. Together we define the certification scope and identify what needs to be prepared.
Documentation for your scope
We can help prepare or review processing responsibilities, privacy risk assessments, controls, procedures and evidence of their operation.
Submission to the certification body
We submit the prepared documentation to the certification body for assessment.
Support throughout the process
We explain the requirements and help you plan the next steps within the agreed scope of work.
How ISO/IEC 27701 certification works
Prepare the documentation
We use information about your organisation to prepare documentation that reflects your activities and the requirements of ISO/IEC 27701.
Submit the documentation
We submit the prepared documentation to the certification body.
Assess conformity
The certification body reviews the documentation and assesses how the management system is implemented in your organisation.
Certification decision
The certification body makes its own decision and issues the certificate when the requirements are met.
Clear documentation and evidence of how the system works help you prepare for the audit.
Trusted by our clients
A selection of organisations CERT Standard has worked with.
Frequently asked questions about ISO/IEC 27701
Answers to common questions about preparation, scope and the certification process.
Does ISO/IEC 27701 support data protection compliance?
It provides a framework for managing privacy and documenting controls. Your organisation still determines its legal obligations and assesses compliance with the laws that apply to it.
How much does certification preparation cost?
The price depends on your activities, organisation size, number of sites and the scope of support. Share your details for a quote that sets out the work involved.
How long does the process take?
Timing depends on the documentation you already have, your readiness and the certification body’s schedule. We can discuss an indicative timetable after reviewing your needs.
What information should we provide?
Start with your activities, sites and current procedures. If available, include existing information about processing responsibilities, privacy risk assessments, controls, procedures and evidence of their operation.
Who issues the certificate?
CERT Standard provides advisory and documentation support. An independent certification body audits the system, makes the certification decision and issues the certificate.
What does a ISO/IEC 27701 certificate cover?
It confirms conformity of a privacy information management system for the processing activities within the agreed scope.
Get ready for ISO/IEC 27701 certification
Tell us about your organisation and what you want to achieve. We’ll prepare a quote for the support you need.