ISO/IEC 27557:2022 - Organisational Privacy Risk Management
Clause 6: Risk management process – ISO/IEC 27557:2022 - Organisational Privacy Risk Management

ISO/IEC 27557:2022 - Organisational Privacy Risk Management 6.3.2: 6.3.2 Defining the scope

ISO 31000:2018 6.3.2 applies, plus: the privacy risk process should cover both the PII processing the organization carries out and any of its products and services able to process PII. With a PIMS in place, what the risk assessment covers should follow the PIMS scope fixed under ISO/IEC 27701:2019, 5.2.3.

Maintained by Gerard BlokdykControl text last updated

Other controls in Clause 6: Risk management process – ISO/IEC 27557:2022 - Organisational Privacy Risk Management

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll ISO/IEC 27557:2022 - Organisational Privacy Risk Management controls