QA Pro AcademyCybersecurity A-Z
Join free
← Back to catalogue
Quillmont Group's processor decision: the incident that started it, when unapproved sub-processor Sonavue exposed 18,400 Brackenfield Mutual call recordings and the client was told after 61 hours against a contractual 24; a fork from 340 clients to three strategies — certify the whole company, certify key service lines, or assure contract by contract — with Option B, ISO/IEC 27701 certification of four lines covering 188 clients, chosen by the Board; and the six processor-duty tests that lift compliant clients from 172 to 316, 93% against a 90% target.
CY-PRO-098Pro Level · PIMS - ISO/IEC 27701

ISO 27701 Certification Strategy for Processors

Help the board decide how the organisation meets its duties as a data processor.

40 hours12 chapters60 lessons433 activities12 labs

What you'll learn

  • Measure processor compliance client by client from the organisation's own registers, and replace self-attestation with tests an auditor can re-perform.
  • Bring sub-processor authorisation, international transfers, documented instructions and breach notification to clients under evidenced, owned control.
  • Meet client audit rights efficiently and safely, and define certification scope options against demand, commitments and readiness.
  • Price processor-assurance strategies over their life, recommend at the margin, set appetite, residuals and indicators, and win a Board resolution that can be held to account.

Price:৳15,000
Sign in to get access

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.