ISO 27001 → LGPD crosswalk
A control-by-control mapping between ISO/IEC 27001:2022 and Lei Geral de Proteção de Dados (Brazil, Lei 13.709/2018). 5 mappings.
| ISO 27001 | LGPD | Relationship | Notes |
|---|---|---|---|
| A.5.1 Policies for information security | Art. 50 Good practices and governance rules | RelatedCurated | Governance & security policy |
| A.5.24 Information security incident management planning and preparation | Art. 48 Communication of a security incident | RelatedCurated | Incident response & breach notification |
| A.5.26 Response to information security incidents | Art. 48 Communication of a security incident | RelatedCurated | Incident response & breach notification |
| A.5.9 Inventory of information and other associated assets | Art. 37 Records of processing operations | RelatedCurated | Asset & data inventory |
| A.8.24 Use of cryptography | Art. 46 Security measures | PartialCurated | Cryptography & data protection |
Mappings marked “Official” derive from standards-body informative references; “Curated” mappings are authored by Cyber Compliance and provided for guidance only.