Skip to content
Cyber Compliance

ISO 27001 → LGPD crosswalk

A control-by-control mapping between ISO/IEC 27001:2022 and Lei Geral de Proteção de Dados (Brazil, Lei 13.709/2018). 5 mappings.

ISO 27001LGPDRelationshipNotes
A.5.1
Policies for information security
Art. 50
Good practices and governance rules
RelatedCurated
Gouvernance et politique de sécurité
A.5.24
Information security incident management planning and preparation
Art. 48
Communication of a security incident
RelatedCurated
Réponse aux incidents et notification des violations
A.5.26
Response to information security incidents
Art. 48
Communication of a security incident
RelatedCurated
Réponse aux incidents et notification des violations
A.5.9
Inventory of information and other associated assets
Art. 37
Records of processing operations
RelatedCurated
Inventaire des actifs et des données
A.8.24
Use of cryptography
Art. 46
Security measures
PartialCurated
Cryptographie et protection des données

Mappings marked “Official” derive from standards-body informative references; “Curated” mappings are authored by Cyber Compliance and provided for guidance only.