ISO/IEC 27002 Guidance: Implementation and Challenges in Detail

This report delves into the ISO/IEC 27002 guidance, focusing on its implementation and the challenges encountered. It examines the processes outlined in Chapter 7, including the identification and documentation of lawful bases, obtaining consent, and conducting privacy impact assessments. The r...Read More

Running head: ISO/IEC 27002 GUIDANCE
ISO/IEC 27002 GUIDANCE
Name of the Student
Name of the University
Author note

1
ISO/IEC 27002 GUIDANCE
Comparison of the guidance
The main aspect that is considered in the Chapter 7, implementation guidance section is
that the entire process starts off with identifying as well as documentation process. After this
process, lawful basis have been performed. After this section, proper determining of the process
by which the consent is obtained is discussed. Obtaining of record consent have been discussed
as well in the implementation guidance section. Privacy impact assessment have been made as
well. Proper contracts with the PII processors have been developed as well. The main aspect that
is considered is that extra requirements that are discussed in the section are implemented in
chapter 8. It can be said that chapter 7 deals with the implementation guidance regarding
documentation process.
What are the challenges faced in the challenge guidance implementation
process?
The major challenges that are faced in the process are as follows: -
 The major challenges that are faced is chapter 7 was the identifying the lawful basis. This
ensures that the relevant lawful assessment of the processing will be ensured as the major
problem.
 Record creation regarding the processing PII was a major issue as well.
 Mechanism to modify the withdrawing consent have been another challenge as it has
been a difficult process.

2
ISO/IEC 27002 GUIDANCE
Reflect on the structure of the standard to push a specific focus on the PII
controller and PII processor
The standard to the push have been very high as the guidance process have been
performed with utmost legitimacy. The entire process have been subdivided in sections and
hence wise this created a better execution of the process.