Program Overview
ISO/IEC 27701 layers privacy controls on top of an existing ISO/IEC 27001 ISMS. Learn to audit PII processing as Controller and Processor, map controls to GDPR, the Australian Privacy Act, CCPA and PIPEDA, and assess data subject rights operations end-to-end.
Syllabus
Day 1 Schedule
PIMS Foundations: Layering Privacy on ISO 27001
Why ISO 27701 cannot exist without 27001 and how the certification scope is written.
Annex A (Controllers) & Annex B (Processors)
Walk through every PIMS-specific control: consent, purpose limitation, retention, subcontractor management.
DSAR & Data Subject Rights Operations
Live workshop tracing access, rectification, erasure and portability requests across systems.
Day 2 Schedule
Cross-Border Transfers, DPIAs & Regulator Engagement
Audit SCCs, adequacy decisions, transfer impact assessments and the DPIA lifecycle.
Mapping PIMS to GDPR, APP, CCPA & PIPEDA
Bridge ISO 27701 controls to specific legal articles so a single audit can support multiple regulator narratives.
Final Knowledge Assessment
Multiple-choice assessment covering every clause area introduced in Plug-In: ISO/IEC 27701 Privacy Information Management Lead Auditor. Pass mark 70%.
This terminal assessment unlocks after you enrol. The exam grades clause-level recall; the simulation requires a passing score before drafting the closing NCR.
Closeout: Live Audit & NCR Drafting
Live War Room simulation tied to Plug-In: ISO/IEC 27701 Privacy Information Management Lead Auditor. Conduct an AI-driven interview, evidence-gather, then draft a defensible NCR.
This terminal assessment unlocks after you enrol. The exam grades clause-level recall; the simulation requires a passing score before drafting the closing NCR.
Learning Outcomes
- Audit a PIMS as an extension to an existing 27001 ISMS
- Distinguish Controller-side (Annex A) and Processor-side (Annex B) obligations
- Map PIMS controls to GDPR articles, Australian Privacy Principles, CCPA and PIPEDA
- Sample data subject rights (DSAR) workflows for completeness and timeliness
- Evaluate cross-border transfer mechanisms and DPIAs