Skip to main content

💼 A.18.1.4 Privacy and protection of personally identifiable information

  • ID: /frameworks/iso-iec-27001-2013/18/01/04

Description​

Privacy and protection of personally identifiable information shall be ensured as required in relevant legislation and regulation where applicable.

Similar​

  • Internal
    • ID: dec-c-7b4eccab

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 NIST CSF v1.1 → 💼 DE.DP-2: Detection activities comply with all applicable requirements67no data
💼 NIST CSF v1.1 → 💼 ID.GV-3: Legal and regulatory requirements regarding cybersecurity, including privacy and civil liberties obligations, are understood and managed14no data
💼 NIST CSF v1.1 → 💼 PR.AC-7: Users, devices, and other assets are authenticated (e.g., single-factor, multi-factor) commensurate with the risk of the transaction (e.g., individuals' security and privacy risks and other organizational risks)1923no data

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance