💼 A.18.1.4 Privacy and protection of personally identifiable information

• Contextual name: 💼 A.18.1.4 Privacy and protection of personally identifiable information
• ID: /frameworks/iso-iec-27001-2013/18/01/04
• Located in: 💼 A.18.1 Compliance with legal and contractual requirements

Description

Privacy and protection of personally identifiable information shall be ensured as required in relevant legislation and regulation where applicable.

Similar

• Internal
  • ID: dec-c-7b4eccab

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 NIST CSF v1.1 → 💼 DE.DP-2: Detection activities comply with all applicable requirements		7	7
💼 NIST CSF v1.1 → 💼 ID.GV-3: Legal and regulatory requirements regarding cybersecurity, including privacy and civil liberties obligations, are understood and managed		2	2
💼 NIST CSF v1.1 → 💼 PR.AC-7: Users, devices, and other assets are authenticated (e.g., single-factor, multi-factor) commensurate with the risk of the transaction (e.g., individuals' security and privacy risks and other organizational risks)		19	22

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags