ATAUDITOR TRAINING · ISO INTERNATIONAL SERVICES
plugin Programme · 2-Day Intensive
Course: ISO/IEC 27701 Privacy Information Management Lead Auditor
Extend an ISMS into a defensible PIMS aligned with GDPR and global privacy regimes.
01Programme Overview
ISO/IEC 27701 layers privacy controls on top of an existing ISO/IEC 27001 ISMS. Learn to audit PII processing as Controller and Processor, map controls to GDPR, the Australian Privacy Act, CCPA and PIPEDA, and assess data subject rights operations end-to-end.
Delivery
Hybrid · Live + Simulation
02Learning Outcomes
On completion, candidates will be able to:
- Audit a PIMS as an extension to an existing 27001 ISMS
- Distinguish Controller-side (Annex A) and Processor-side (Annex B) obligations
- Map PIMS controls to GDPR articles, Australian Privacy Principles, CCPA and PIPEDA
- Sample data subject rights (DSAR) workflows for completeness and timeliness
- Evaluate cross-border transfer mechanisms and DPIAs
03Course Outline
A blended pathway combining lecture (4), lab (1), and simulation (1) modules across 2 days. Assessed components are marked.
Day 1
09:00 — 10:30 · lecture
PIMS Foundations: Layering Privacy on ISO 27001
Why ISO 27701 cannot exist without 27001 and how the certification scope is written.
10:45 — 12:30 · lecture
Annex A (Controllers) & Annex B (Processors)
Walk through every PIMS-specific control: consent, purpose limitation, retention, subcontractor management.
13:30 — 15:30 · lab
DSAR & Data Subject Rights Operations
Live workshop tracing access, rectification, erasure and portability requests across systems.
Day 2
09:00 — 11:00 · lecture
Cross-Border Transfers, DPIAs & Regulator Engagement
Audit SCCs, adequacy decisions, transfer impact assessments and the DPIA lifecycle.
11:15 — 13:00 · lecture
Mapping PIMS to GDPR, APP, CCPA & PIPEDA
Bridge ISO 27701 controls to specific legal articles so a single audit can support multiple regulator narratives.
15:00 — 16:00 · exam
Final Knowledge Assessment
Multiple-choice assessment covering every clause area introduced in Plug-In: ISO/IEC 27701 Privacy Information Management Lead Auditor. Pass mark 70%.
16:00 — 18:00 · simulation
Closeout: Live Audit & NCR Drafting
Live War Room simulation tied to Plug-In: ISO/IEC 27701 Privacy Information Management Lead Auditor. Conduct an AI-driven interview, evidence-gather, then draft a defensible NCR.
04Assessment Outline
Candidates are assessed against IAF / ISO/IEC 17021-1 personnel competence criteria. Assessment is layered — written examination, practical NCR simulation, and witnessed audit closeout — modelled on certification body witness protocols.
Written Examination
13 Questions
Closed-book, clause-anchored multiple choice. 70% pass mark. Single re-sit included.
Practical Closeout Simulation
1 Scenario
Live NCR drafting, opening/closing meeting facilitation, evidence triangulation, rubric-scored by lead assessor.
Continuous Calibration
In-Module Labs
1 lab modules with formative feedback; instructor calibration on rubric drift.
Credential Issue
Digital Credential + Transcript
Verifiable digital credential issued within 5 working days of successful closeout. PDF transcript supplied for CPD logging with CQI/IRCA, Exemplar Global, JRCA.
Assessed Modules
- Day 2 · Final Knowledge Assessment (exam)
- Day 2 · Closeout: Live Audit & NCR Drafting (simulation)
05A Globally Recognised Credential
Audit anywhere. Certify everywhere.
The Auditor Training credential is engineered against the IAF Multilateral Recognition Arrangement (MLA), aligning competence with conformity assessment bodies in 100+ economies — so the assessor you train in Sydney is the assessor that's accepted in Frankfurt, Singapore, São Paulo or Toronto.
IAF MLA Aligned
International Accreditation Forum
Course architecture mapped to ISO/IEC 17021-1 §7 personnel competence criteria — the framework underpinning IAF signatories worldwide.
CQI / IRCA Pathway
Chartered Quality Institute
Module taxonomy and assessor rubric mirror CQI/IRCA certified course requirements, providing a direct pathway for IRCA QMS / EMS / OH&S auditor registration.
Exemplar Global Recognised
Americas & Asia-Pacific
Transcripts are formatted for Exemplar Global CPD logging — accepted across Exemplar Global TPECS units (AU, QM, EM, OH).
JRCA Compatible
Japan & East Asia
Clause-anchored evidence taxonomy is compatible with JRCA registration pathways for ISO 9001 / 14001 / 45001 auditors.
Total Investment
A$1,850
Per seat. Includes courseware, simulation access, examination, single re-sit, and digital credential. Group rates available for cohorts of 6+.
To accept this quote
Reply with Quote Ref above to
info@auditortraining.com
or visit auditortraining.com/programs
Authorised — Steven Asnicar, Master Assessor
Accepted — Client Signature & Date