文章詳目資料

電腦稽核

  • 加入收藏
  • 下載文章
篇名 隱私資訊管理系統標準ISO27701於GDPR適用性評估
卷期 42
作者 魏銪志洪韻茹陳昇智祝亞琪
頁次 040-051
關鍵字 隱私保護資訊安全ISOPIIGDPRPrivacy protection,Information security
出刊日期 202008

中文摘要

歐洲隱私權法規-一般資料保護規定(EU General Data Protection Regulation, 簡稱GDPR)於2016年正式發布並以於2018年5月25日生效,ISO標準組織為因應GDPR合規及加強隱私保護完整性,在內容上以隱私保護為核心並進行全面性的規範,以確保組織內隱私保護、資料的安全性、完整性及可用性,並且有效進行管控,著手起草ISO/IEC 27552,後以ISO/IEC 27701: 2019進行發布。為瞭解ISO/IEC 27701: 2019以及ISO/IEC 275522nd CD內容差異進行比對,對照GDPR於ISO/IEC 27701: 2019以及ISO/IEC 275522nd CD中,所列項目完整度是否無對應上的缺漏。也同時比較ISO/IEC 27001: 2013、ISO/IEC 27002: 2013、ISO/IEC 29100: 2011、ISO/IEC 29151: 2017與ISO/IEC 27018: 2019完整度及對應上項目差異。

英文摘要

The EU General Data Protection Regulation (GDPR) was officially released in 2016, and took effect on May 25, 2018. The International Organization for Standardization (ISO) considered improving privacy protection a core subject in the new GDPR compliance. To ensure adequate privacy protection, data security, integrity, availability and effective management and control within an organization (the "Items"), ISO began the drafting of ISO/IEC 27552, and then ISO/IEC 27701: 2019 was released. In order to understand the differences between ISO/IEC 27701: 2019 and ISO/IEC 27552 2nd CD, we further compared the incorporation of GDPR provisions in ISO/IEC 27701: 2019 and ISO/IEC 27552 2nd CD to find out whether the protection provided by these two ISOs for the Items was adequate. In this paper, we also discuss and compare ISO/IEC 27701: 2019 with other standards, such as ISO/IEC 27001: 2013, ISO/IEC 27002: 2013, ISO/IEC 29100: 2011, ISO/IEC 29151: 2017 and ISO/IEC 27018: 2019, to find the differences in their protection of the Items.

相關文獻