Processors have more legal obligations placed on them in the case of a breach however a controller will be responsible for ensuring the contracts with the processor comply with the GDPR. ISO 27001 certification is essential for protecting your most vital assets like employee and client inform