Privacy Guidance.pptxnnjf;nf;jnfe;kjnwe;fn;

jjfb;jf;;nf;dfn;kwfb;wdjf

1. ISO 27701:2019 Privacy Information Management Implementation Deck By ControlCase

2. Final Output ISO 27701:2019 PIMS Status Management Review Report (Minutes of Meeting, PPT) Internal Audit Report Scope of ISMS PIMS Policy & Procedure Documents (Mandatory and Minimum) / Training Records Statement of Applicability

3. Pre-Project – Identifying Scope Input Identify Scope of PIMS - Interview Identify Locations, Physical locations - Interview Output Scope Document or section in ISMS Manual – Document Checks Who is the project Implementation POC for PIMs Has management given authority/approval for the POC to reach out to individual process owners and department And process owners, departments have been notified about ISO 27701:2019 PIMs implementation Has a date of implementation decided?

4. Step 1: Assess the current state of privacy management - What

5. Step 1: Assess the current state of privacy management - How Listing down Products, Services and any internal & external process that handles PII data – Talk to POC and record in Data Processing Record sheet Identify which department is Controller and Processor – Talk to POC and record in Data Processing Record sheet Listing down what PII data is stored. Name, Mobile, fingerprints, etc – Talk to POC and record in Data Processing Record sheet Create data flow for each department wise to identify Risk and Controls - Record and save in PDF, Work or image file

6. Step 1: Assess the current state of privacy management - How Check if SOA is available and filled – Review / Create SOA Check if PIMS document available – Review /Create Documents Step 2: Gap Assessment Check the Gap Assessment excel Sheet

7. Step 3: PIMS Documents creation and updating PIMS Manual Privacy Manual SOA Data Processing Record Sheet Updates to existing ISMS manuals, policies Update to existing Risk Register and Treatment Privacy Impact Assessment Data Retention & Disposal Policy Encryption Policy Email Security Policy Third-party Contracts / NDA Policy ….

8. Step 4: Internal Audit and Add into MRM PIMS Manual Privacy Manual Data Processing Record Sheet Updates to existing ISMS manuals, policies Update to existing Risk Register and Treatment Privacy Impact Assessment Data Retention & Disposal Policy Encryption Policy Email Security Policy Third-party Contracts / NDA Policy ….