Implementation of ISO 27001 Standards as GDPR Compliance Facilitator

Journal of Information Systems Engineering & Management

卷:4

Pedro Oliveira¹  Teresa Guarda²  Isabel Maria Lopes³ 

[1] ALGORITMI Centre, Minho University, Guimarães, PORTUGAL;

[2] UNIAG, Polytechnic Institute of Bragança, PORTUGAL;

[3] Polytechnic Institute of Bragança, Bragança, PORTUGAL;

关键词: regulation (EU) 2016/679;    general data protection regulation;    ISO/IEC 27001;   

DOI  :  10.29333/jisem/5888

来源: DOAJ

【 摘 要 】

Personal Data Protection has been among the most discussed topics lately and a reason for great concern among organizations. The EU General Data Protection Regulation (GDPR) is the most important change in data privacy regulation in 20 years. The regulation will fundamentally reshape the way in which data is handled across every sector. The organizations had two years to implement it. As referred by many authors, the implementation of the regulation has not been an easy task for companies. The question we aim to answer in this study is how far the implementation of ISO 27001 standards might represent a facilitating factor to organizations for an easier compliance with the regulation. In order to answer this question, several websites (mostly of consulting companies) were analyzed, and the aspects considered as facilitating are listed in this paper.

【 授权许可】

Unknown