Microsoft sponsors the open-sourced Data Protection Mapping Project to bring a common understanding of the relationship between ISO/IEC 27701 and various data protection regulations. This universal framework allows organizations to efficiently implement compliance with new regulatory requirements. An internal or external third party, who is accredited to assess, then evaluates the organization's compliance with the requirements of the standard and issues a certificate to that effect.

Once mapped, the ISO/IEC 27701 operational controls are implemented by privacy professionals. In addition, any ISO/IEC 27701 audit requires the organization to declare applicable laws/regulations in its criteria for the audit meaning that the standard can be mapped to many of the requirements under GDPR, California Consumer Privacy Act (CCPA), or other laws. ISO/IEC 27701 accomplishes this integration through a framework for managing personal data that can be used by both data controllers and data processors, a key distinction for General Data Protection Regulation (GDPR) compliance. It specifies requirements and provides guidance for a Privacy Information Management System (PIMS), making the implementation of PIMS a helpful compliance addition for the many organizations that rely on ISO/IEC 27001, as well as creating a strong integration point for aligning security and privacy controls. ISO/IEC 27701:2019 is built to complement the widely used ISO/IEC 27001 and ISO/IEC 27002 standards for information security management. In this article ISO/IEC 27701:2019 overview

Microsoft office 2019 standard iso