Processors have more legal obligations placed on them in the case of a breach however a controller will be responsible for ensuring the contracts with the processor comply with the GDPR.ISO 27001 implementation is an ülküsel response to customer and legal requirements such bey the GDPR and potential security threats including: cyber crime, person