What problem does it solve? Privacy, legal, and compliance teams struggle to interpret ISO/IEC 27701 requirements, choose between the 2019 extension edition and the 2025 standalone edition, and produce audit-ready PIMS documentation such as gap analyses, Statements of Applicability, DPIAs, and privacy policies. ## Core Features & Use Cases - Gap Analysis & Certification Readiness: Produces structured gap tables covering Clauses 4–10 and all applicable Annex A controls, with status, evidence needs, and remediation priorities. - PIMS Document Generation: Creates privacy policies, RoPA, DSR procedures, DPIA templates, and role-scoped Statements of Applicability mapped to controller (A.1), processor (A.2), and shared security (A.3) controls. - 2019 to 2025 Transition Support: Provides control-by-control mapping, transition audit steps, and a timeline toward the October 2028 deadline. - Use Case: A SaaS company acting as a PII processor asks for an SoA; the skill scopes it to A.2 plus A.3 (47 controls), generates the applicability table, and flags missing sub-processor authorization controls. ## Quick Start Ask the skill to perform an ISO 27701:2025 gap analysis for your organization, stating whether you act as a PII controller, processor, or both.
