GDPR to ISO 27001 Engineering Crosswalk
A responsibility-aware map from GDPR obligations to ISO 27001 governance and Annex A controls without treating ISO certification as proof of GDPR compliance.
Risk & crosswalks
ISO27001 domain with 6 resources grouped for implementation and audit work.
Domain guide
What this domain covers
Risk treatment, ISO 27005 links, GRC mappings, control relationships, and cross-framework translation notes.
6 resources
Guide + resources
Grouped resources
Crosswalks
Mappings across controls, risks, standards, and assurance views.
A.5 Controls Implementation Audit Risk Mapping
This table maps each covered A.5 organizational control to implementation output, audit evidence, and ISO/IEC 27005-style risk logic.
A.6 People Controls Implementation Audit Risk Mapping
- A.6 controls are people-risk treatments. They reduce the chance that the wrong person is trusted or that the right person lacks clear obligations. - A.6 evidence often sits ou...
A.7 Physical Controls Implementation Audit Risk Mapping
- Physical controls often fail through behavior, not technology. Observation and walkthrough evidence matter. - Physical controls should align to asset inventory, classification...
A.8 Technological Controls Implementation Audit Risk Mapping
- A.8 controls require technical evidence. Policies are not enough. - Endpoint controls connect to remote working, off-premises assets, and incident reporting. - Privileged acce...
ISO 27001 Implementer Auditor ISO 27005 Mapping
1. implementer view: what to build; 2. auditor view: what to verify; 3. ISO/IEC 27005 view: what risk logic supports the decision.
Deep links
Link to this domain with /research/iso27001/risk-crosswalks/ . Link directly to exact notes from any resource card above.