Thumbnail
Accreditation Requirements - Privacy Information Management Systems
Useful information
Type of Publication:
Accreditation documents and guidance
Document Date:
2024-05-17
Accreditation requirements for certification bodies certifying privacy information management systems
- Information Security Management Systems accreditation is a prerequisite
- ISO/IEC 27006-2:2021 Requirements for bodies providing audit and certification of information security management systems — Part 2: Privacy information management systems
Certification standards
• ISO/IEC 27701:2019
Accreditation requirements for all management systems certification bodies
- ISO/IEC 17021-1:2015 – Conformity assessment – Requirements for bodies providing audit and certification of management systems -- Part 1: Requirements
- IAF MD 1:2023 – IAF Mandatory Document for the Certification of Multiple Sites Based on Sampling
- IAF MD 2:2023 – IAF Mandatory Document for the Transfer of Accredited Certification of Management Systems
- IAF MD 4:2023 – IAF Mandatory Document for the Use of Information and Communication Technology (ICT) for Auditing/Assessment Purposes
- IAF MD 11:2023 – Application of ISO/IEC 17021-1 for Audits of Integrated Management Systems (applies only to CBs certifying to multiple certification standards)
IAF MD 23:2023 – Control of Entities Operating on Behalf of Accredited Management Systems Certification Bodies