How is GDPR different from ISMS / ISO 27001?

ISMS and ISO 27001 cover information security management overall. GDPR focuses on personal data: lawful bases, data subject rights, DPIA, and breach notification.

Do you have GDPR competence?

Yes. This direction is backed by GDPR | Data Protection Leader (TAYLLORCOX) certification and practical experience building data-protection processes in business.

How is this different from the GDPR module in SecBoard?

This is consulting and process setup in the company. SecBoard is the platform for data subjects, consents, DPIA, requests, and incidents. They can be combined.

Where should we start?

With a short description of which personal data you process, for whom, and for what purpose. Then we run a gap analysis and a work plan.

Direction

GDPR and data protection

We help build personal data protection under GDPR: documents, processes, DPIA, consent records, and data subject request handling.

GDPR directions 12

Three steps: data-protection direction → business task → specific interest. You can select several items. Choosing in the tree does not confirm GDPR compliance and is not a legal guarantee.

Choose a direction

GDPR documentation 6

Policies, privacy notices, and internal procedures.

Personal-data inventory 6

Which data is collected, why, where it is stored, and who has access.

Consents and legal bases 6

Managing consents and recording processing bases.

Data-subject requests 6

Access, rectification, erasure, restriction, and other rights.

DPIA and risk assessment 6

Assessing how processing operations affect personal-data protection.

Processes and accountability 6

Roles, approvals, deadline control, and internal procedures.

Data protection in systems 6

Access, event logs, retention, deletion, and technical measures.

Vendors and data transfers 6

Processor contracts, sub-processors, and international transfers.

Incidents and data breaches 6

Detection, logging, assessment, and response.

GDPR compliance audit 6

Checking current state, gaps, and an improvement plan.

Automating GDPR processes 6

Registers, reminders, execution control, and reporting.

Not sure yet 6

We will help identify the priority direction.

Request a callback

To make the request more precise — pick a GDPR direction in the tree nearby.

What the engagement covers

Gap analysis of personal data processing, policies and procedures, a processing register, consents, DPIA, data subject request workflows, readiness for 72-hour breach notification, and training for accountable owners.

DPIA, consents, and subject requests

We set up practical workflows: data protection impact assessment (DPIA), legal bases and consent records, responses to access / rectification / erasure requests, and logging of personal-data incidents.

When this service fits

When the company processes personal data of customers or staff, enters the EU market / works with European partners, or needs compliance evidence for customers and audits. Where useful, we combine this with ISMS and SecBoard.

Questions

How is GDPR different from ISMS / ISO 27001? ISMS and ISO 27001 cover information security management overall. GDPR focuses on personal data: lawful bases, data subject rights, DPIA, and breach notification.
Do you have GDPR competence? Yes. This direction is backed by GDPR | Data Protection Leader (TAYLLORCOX) certification and practical experience building data-protection processes in business.
How is this different from the GDPR module in SecBoard? This is consulting and process setup in the company. SecBoard is the platform for data subjects, consents, DPIA, requests, and incidents. They can be combined.
Where should we start? With a short description of which personal data you process, for whom, and for what purpose. Then we run a gap analysis and a work plan.

Discuss a project Projects

Products in this direction

SecBoard Comprehensive information security management platform

Other directions

Information security software This direction focuses on custom builds for information security teams: a cabinet, roles, statuses, and evidence around your process. SecBo… ISMS preparation and support We help companies build an ISMS from scratch or strengthen an existing one: internal policies, processes, controls, and readiness for PCI D… Cybersecurity We help protect corporate infrastructure: networks, security controls, event monitoring, and information security incident handling.