Skip to content
CYRENTIQ
All servicesCompliance & certification

Privacy Management & ISO 27701 Readiness

Build a practical plan for how your organisation manages personal information.

What this helps you decide

Which privacy responsibilities, information-handling practices and records need improvement?

When you need it

Your organisation needs a clearer view of privacy processes, responsibilities and supporting evidence. Build a practical privacy-management roadmap.

Business impact & an example

Personal information can be spread across forms, email, shared files and external services. Understanding those flows helps identify unnecessary collection, access and retention.

A question worth asking

What personal information do we collect, where does it go, who can access it and when should it be deleted?

Examples guide the scope; they are not promised findings.

What’s included & what you receive

Agreed coverage

  • Agreed privacy-management boundaries
  • Process and evidence gap review
  • ISO 27701 readiness and implementation support as scoped
  • Policy, ownership and improvement planning
  • ISO/IEC 27701 privacy management readiness
  • Consideration of the Privacy Act 1988, the Australian Privacy Principles and the Notifiable Data Breaches scheme

Your deliverables

  • Privacy-management gap observations
  • Prioritised improvement roadmap
  • Agreed policy and evidence deliverables
  • Responsibilities and next-step briefing
Exclusions & limitations

Legal advice, a determination of legal compliance and independent certification are not included. Jurisdictions, applicable requirements and specialist roles must be confirmed before engagement.

References to standards are not claims of certification, accreditation or endorsement.

How it works

  1. 01

    Initial conversation

    Tell us what you want to achieve and which systems are involved. You do not need to know the technical details.

  2. 02

    Initial assessment

    We review your situation and confirm a sensible scope. The initial assessment is completed within 3–5 business days.

  3. 03

    Written proposal

    You receive a proposal setting out the scope, deliverables, fees (AUD, ex GST), timing and exclusions.

  4. 04

    Delivery

    We carry out the agreed work, with one point of contact and specialist practitioners matched to your scope.

  5. 05

    Findings and next steps

    We walk you through the results and priorities, and any follow-up or re-checks agreed in your proposal.

Frequently asked questions

How much does Privacy Management & ISO 27701 Readiness cost?

Tailored to your scope – quoted after your initial assessment (AUD, ex GST). The final fee is confirmed in a written proposal before any work begins.

How long does it take?

The initial assessment is completed within 3–5 business days. The project timeframe depends on your scope and is confirmed in your proposal.

What do you need from us?

Your input: Access to key people and documents as agreed in scope. Follow-up: Review session and agreed update window included in scope.

Do you issue certificates or audit reports?

No. We provide readiness and advisory services. Certificates (such as ISO/IEC 27001) are issued by independent accredited certification bodies, and SOC 2 reports by independent licensed audit firms. Their fees are separate.

Do you work outside Gippsland?

Yes. We are based in Leongatha, Gippsland, and work with businesses across Australia.

Related services

Technical words, explained simply
Cybersecurity
Protecting your information, accounts and systems from misuse.
Compliance
Showing how you meet the standards or requirements that apply to your organisation.
Penetration test
An authorised attempt to find and demonstrate security weaknesses.
API
A connection that lets two software systems exchange information.
QA and regression testing
Checking that software works and that changes have not broken existing features.
MFA
An extra sign-in check, such as an approval on your phone, alongside your password.
AI governance
Rules for choosing and using artificial intelligence safely and responsibly.
Backup
A separate copy of your files and systems you can restore if something goes wrong.
Threat detection
Tools and people that watch for signs of an attack and respond quickly.
Scope
Exactly what work is included, what is excluded and what you will receive.