The standard ISO 27001 covers almost the entire spectrum of information security, however it’s depth is limited when it comes to privacy protection. An ISO 27001 certificate is therefore not sufficient to comply with the GDPR. Kiwa’s GDPR certification service incorporates detailed privacy protection, so meets that gap. Organisations that already comply with the GDPR can derive added value through an ISO 27001 certificate, because information security is more thoroughly covered.
Read more about our 27001 certification services.