Additional ISO/IEC 27002 guidance for PII processors, ISO 27701:2019
ISO 27701:2019 8.4.3: PII transmission controls
The organization must apply controls to personal data sent across a data transmission network, designed to ensure it reaches its intended destination, typically by limiting access to transmission systems to authorized individuals and by following processes, including retaining audit data, that ensure transmission without compromise to the correct recipients, with transmission requirements capable of inclusion in the contract with the customer and, where no contractual requirement exists, advice appropriately taken from the customer before transmitting.
This control maps to 47 controls across 21 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
You are reading one control. How much of ISO 27701:2019 have you already done?
ISO 27701:2019 8.4.3 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of ISO 27701:2019 your existing evidence covers. Hold SOC 2 and 58 of 108 ISO 27701:2019 controls already carry evidence.
Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 289 were rejected on the SOC 2 pair alone.