QHS023

Privacy Information Management System (PIMS)

SO 27001:2022 is an international standard that provides a framework for an Information Security Management System (ISMS). The standard includes new requirements for organizations to have a robust supplier and third-party management program. This includes: Identifying and analyzing all third parties that may impact customer data and services security Conducting a risk assessment for each supplier The standard also includes control categories such as: Threat intelligence Information security for the use of cloud services Information and communications technology for business continuity Physical security monitoring Configuration management Information deletion Data masking Data leakage prevention