Self-assessed · sample · ISO/IEC 27701

Initech: ISO/IEC 27701 privacy lens from one AICM run

Privacy on top of the ISMS. Same GRA answers as 27001 and 42001. CSA’s published AICM sheet only grades a handful of controls against 27701, so this report is deliberately thin: silence is not “privacy done.”

Assessed on CSA AICM via the function diagnostic, then rolled through CSA’s AICM→ISO/IEC 27701 crosswalk. Readiness for conversation and planning, not an ISO certification, audit opinion, or measured result.

Executive summary

Initech: CSA’s AICM sheet only grades 2 controls against ISO/IEC 27701 today. Treat this privacy lens as sparse — close DSP/privacy domains with a dedicated PIMS read, not this GRA slice alone. Self-assessed, not certification.

Privacy information management (PIMS) — privacy controls on top of the ISMS.

Matrix: 2 AICM controls carry an explicit 27701 row in the CSA sheet. For a real PIMS climb, pair this with DSP-domain coverage and local privacy law, not GRA alone.

Control register

Expect mostly Unmapped on this GRA slice. That is a property of the CSA mapping density, not a claim that Initech has no privacy work.