A.7 Additional ISO 27002 guidance for PII controllers

ISO/IEC 27701:2019 extends ISO/IEC 27001 with privacy-specific requirements, and entry a1 supplies supplementary guidance from ISO 27002 for organisations that act as personal data controllers, detailing how to apply existing security controls to protect personally identifiable information.