General Data Protection Regulation (GDPR)

If you are a  company that does business in Europe you are undoubtedly seeking GDPR assessment and accreditation solutions. You may have already guessed that between the preparation costs to get ready for a GDPR audit as well as the third party assessment organization to audit and certify your company, the expenses exponentially begin piling up.

Modules include:

• General Data Protection Regulation (GDPR) attestation

Want to see how you prepared you really are?

Take our FREE GDPR readiness assessment and download your report today. Follow this link to create an account and see how compliant with GDPR you really are!

International Organization for Standardization (ISO/IEC) 27701

Continuum GRC created the number one ranked IRM GRC audit software solution for ISO/IEC 27701 audits that empowers you to prepare for an ISO/IEC 27701 audit effectively while dramatically reducing costs in preparation for working with a third-party assessment organization.

ISO/IEC 27701 specifies requirements and provides guidance for establishing, implementing, maintaining and continually improving a Privacy Information Management System (PIMS) in the form of an extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy management within the context of the organization. ISO/IEC 27701 specifies PIMS-related requirements and provides guidance for PII controllers and PII processors holding responsibility and accountability for PII processing. ISO/IEC 27701 is applicable to all types and sizes of organizations, including public and private companies, government entities and not-for-profit organizations, which are PII controllers and/or PII processors processing PII within an ISMS.

Modules include:

• ISO/IEC 27701

Data Privacy Impact Assessment (DPIA)

Organizations looking to get ahead of the increasing demands of new data protection laws and regulations around the world can utilize a DPIA to prepare to enhance privacy policies and procedures, or to comply with existing regulations such as GDPR, CCPA, HIPAA Privacy Rule, EU-U.S. Privacy Shield, and the AICPA SOC 2 Privacy Trust Principle.

Modules include:

• Data Privacy Impact Assessment (DPIA) attestation

California Consumer Privacy Act (CCPA) attestation

The CCPA applies to any for-profit entity “doing business” in the state of California, whether or not they have a physical presence in the state, that meets at least one of the following criteria:

• Gross annual revenue above $25 million
• Annually buys, receives, or shares personal information belonging to 50,000 or more California consumers, households, or devices
• Derives at least half of annual revenue from selling personal information belonging to California consumers

Modules include:

• California Consumer Privacy Act (CCPA) attestation