OSS

×
Services Case Studies Our Places
Information & Cloud Security
ISO 27017: 2015 - Cloud Security Implementation Information Security Management System NIST - Cyber Security Framework (CSF)
ITSM & IT Governance
IT Service Management System (SMS) IT Governance Integrated Management System
Risk Management
COSO Implementation Enterprises Risk Management (ERM)
Quality & Health Safety and Enviroment
Environment, Health & Safety Solution Quality Management System
Data & Information Privacy
General Data Protection Regulation (GDPR) California Consumer Privacy Act (CCPA) Privacy Information Management System (PIMS)
Business Continuity & Organization Controls
Business Continuity & Organization Controls System & Organization Control (SOC 1) Service Organization Control (SOC 2)
Software Engineering
Process Excellence Tech Excellence
Digital Transformation
TM Forum Digital Maturity Model (DMM) Business & Digital Transformation Strategy Digital Marketing Solutions Services
Quality Assurance
Software QA Consulting Ensuring Exceptional Software Quality Automated Testing for Mission-Critical Projects Quality Assurance Automation, Scaled
Software Development Life Cycle
Professional Software Consulting Our R&D Capabilities Embrace DevOps to Gain a Competitive Edge Enterprise-Grade Maintenance and Support Revitalizing Your Legacy Systems Project recovery at scale
First slide
other slide
other slide
other slide
other slide
other slide
Digital Transformation

Integration and leveraging of new and existing technologies, processes and competencies into the way business is done. Read More

Digital Strategy & Targets

Identifying the different ways technology can be leveraged to create value, categorized as external or internal opportunities. Read More

Customer Intelligence

Collecting and analyzing customer interaction data to gain insights about customer behavior. Read More

Digital Marketing

Marketing that uses electronic devices to convey promotional messaging and measure its impact. Read More

Five Trends in Risk Management to Watch in 2023: What You Need to Know.

Which major trends are we now observing in the risk management industry? In this article, we outline five trends and discuss how they will change risk management in 2023. Read More

Staying Afloat as a Healthcare Risk Management leader is one of the Best Things You can do

The process of detecting risks that could endanger a healthcare organization, its patients, personnel, or anybody else in the institution is known as risk management. Read More

Reach out to us in the nearest office.

Oman Office

Muscat

2nd Floor, Tamimah Building, Al Nahdah Road, Al Wattayah, PO Box 395, Muscat 118.
Muscat, Sultanate of Oman

Comming Soon
Comming Soon
Comming Soon

Follow Us

ISO 27701 - 2019 Overview

ISO 27701 provides specification and guidance for including personally identifiable information (PII) in the implementation of information security management system. It is referred as ‘Privacy information management system’. ISO 27701 extends the requirements of ISO/IEC 27001:2013 to take into account the protection of privacy of PII principals as potentially affected by the processing of PII, in addition to information security.

In Coral, we have a formal methodology to fulfill and implement ISO 27701/privacy information management system.

The standard requirements can be used by organizations to implement ISO 27701 as an independent assessment or an extension of an existing ISO 27001/ISO 27702 certification.

After we have identified whether an organization is a controller and/or a processor, we guide an organization through a step-by-step process of determining applicable requirements and taking them through the journey which has the following broad phases:

Our ISO 27701 - 2019 Consulting Methodology has the following broad phases.

We bring our world-class experience in delivery BCMS ISO 27701 - 2019 implementation leading to successful certification.

PHASE I

Information flow assessment

This phase involves identification of information sources, and is processing infrastructure that involves personnel, technology, physical infrastructure.

PHASE II

Gap Analysis

This phase involves performing privacy impact assessment and security risk assessment to determine security and legal loopholes. Identified gaps are provided with detail recommendations.

PHASE III

Control Design and documentation

This phase involves our methodology that involves distribution security responsibility to internal stakeholders, with control policies and transactions that ensures that the PIMS is well embedded in the organization processes. This also includes nomination of a data protection officer and creating data protection office, for the organization. In a typical engagement organization receives 25+ policies and procedures.

PHASE IV

Tracking

This phase involves tracking the client risks, and documentation on a weekly basis till all internal controls are adequately implemented.

PHASE V

Performance Tracking

This phase involves showcasing client with changes in a given period by providing change specific score of compliance between 0 -100% compliance.

PHASE VI

Internal Audit

This phase involves verifying the governance system created for the organization is well in place and ready to declare as PIMS compliant.

At this stage the client has implemented the governance system in completeness.

WhatsApp Us