ISO 27701 Privacy Information Management System

No.  It must be certified with ISO 27001 Certification at the same time or before.

The Fees depend on company size, number of locations, business nature and operation complexity.

For Company (Staff < 20), it take 6 months on average.

For Company (Staff ~50), it take 7-9 months on average.

For Company (Staff ~100), it take 8-10 months on average.

You may take below steps :

1) ISO 27701 Gap Analysis.

2) Establishment of ISO 27701 Documentation.

3) Attend ISO 27701 Training.

4) Implementation of ISO 27701 System.

5) Arrange an Internal Audit

6) External ISO 27701 Audit by Certification Body.

There are two major Fees.

1) ISO 27701 Certification Fee charged by Accredited Certification Body such as SGS, Lloyd’s Register,BV, BSI, ACI, DW..

2) Consultant Fee charged by us.

The Fees depend on company size, number of locations, business nature and operation complexity

Yes. You can take a series of training courses, draft the documentation…. liaise with Certification Body if you have sufficient time and master the ISO 27701 requirements

No. Because of conflict of interest. Certification Body can provide ISO 27701 Standard generic training only but cannot tell you how to implement ISO 27701 System in your company.

Absolutely Yes. In general, ISO Consultant will draft documentation, guide your company to implement ISO 27701 system until passing in ISO 27701 Certification Audit.

In general, the company can put the ISO 27701 logo in the website, name card and letterhead after receipt of corresponding ISO 27701 Certificate.