Question 1 of 30
\"SecureTrans Logistics,\" a shipping company implementing ISO 27701:2019, already maintains extensive documentation for its ISO 9001 (Quality Management) and ISO 27001 (Information Security) certifications. Regarding the ADDITIONAL documentation required specifically for ISO 27701, which of the following represents the MOST essential and unique set of documents that \"SecureTrans Logistics\" MUST create and maintain?
Records of processing activities detailing the categories of personal data processed, purposes of processing, data retention periods, and data transfer mechanisms, along with documented procedures for conducting Data Protection Impact Assessments (DPIAs) and handling data subject rights requests (access, rectification, erasure, etc.).
A comprehensive inventory of all IT assets used by the company, including servers, computers, and mobile devices, along with detailed network diagrams and security configurations, as well as employee training records on general cybersecurity awareness.
A detailed business continuity plan outlining procedures for recovering from natural disasters, cyberattacks, and other disruptions, along with a risk register identifying potential threats to the company's physical infrastructure and supply chain.
Financial statements, including balance sheets, income statements, and cash flow statements, along with records of all contracts with suppliers and customers, demonstrating the company's financial stability and compliance with accounting regulations.

Preparing for ISO 39001:2012 Internal Auditor? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free