PD CEN ISO/IEC/TS 27006-2:2022

Requirements for bodies providing audit and certification of information security management systems - Part 2: Privacy information management systems

Published:

31 Mar 2023

•

Withdrawn:

22 Oct 2025

1 Scope

This document specifies requirements and provides guidance for bodies providing audit and certification of a privacy information management system (PIMS) according to ISO/IEC 27701 in combination with ISO/IEC 27001, in addition to the requirements contained within ISO/IEC 27006 and ISO/IEC 27701. It is primarily intended to support the accreditation of certification bodies providing PIMS certification.

The requirements contained in this document need to be demonstrated in terms of competence and reliability by anybody providing PIMS certification, and the guidance contained in this document provides additional interpretation of these requirements for any body providing PIMS certification.

NOTE This document can be used as a criteria document for accreditation, peer assessment or other audit processes.

Product Details

Descriptors

Certification bodies

Organizations

Approval organizations

Certification (approval)

Management

Information

Data security

ICS Codes

03.120.20 Product and company certification. Conformity assessment

35.030 IT Security

Committee

IST/33

International relationships

Identical to:

CEN ISO/IEC/TS 27006-2:2022

ISO/IEC TS 27006-2:2021

ISBN

978 0 539 22030 8

Publisher

BSI