What Is This Module For?
The ISO 27001 module helps you track your organisation's implementation of the ISO/IEC 27001:2022 Information Security Management System (ISMS) standard — which is a key technical safeguard required by the DPDP Act.
Why Is This Important?
The DPDP Act requires Data Fiduciaries to implement "reasonable security safeguards" (Section 8(5)). ISO 27001 certification is the internationally recognised standard that demonstrates these safeguards and is increasingly required by enterprise clients and regulators.
Step-by-Step Guide
- Go to ISO 27001 in the sidebar under Security & Risk.
- Complete the gap assessment — the module maps ISO 27001:2022 Annex A controls to your current security practices.
- Assign controls to team members — each control has an owner and an implementation status.
- Upload evidence for each implemented control (policies, logs, certificates).
- Track your overall implementation percentage on the dashboard.
- Generate a Statement of Applicability (SoA) for the certification audit.
Frequently Asked Questions
Q: Does dcomply issue the ISO 27001 certificate?
A: No. The certificate is issued by an accredited certification body after an external audit. dcomply helps you prepare for and manage that audit process.
Q: How long does ISO 27001 certification take?
A: Typically 6–12 months from starting implementation to receiving the certificate, depending on your organisation's starting maturity.