ISO/IEC 27001 – Information Security courses

ISO/IEC 27001 Lead Implementer training course enables participants to acquire the knowledge necessary to support an organization in effectively planning, implementing, managing, monitoring, and maintaining an information security management system (ISMS).Information security threats and attacks increase and improve constantly. The best form of defense against them is the proper implementation and management of information security controls and best practices. Information security is also a key expectation and requirement of customers, legislators, and other interested parties.This training course is designed to prepare participants in implementing an information security management system (ISMS) based on ISO/IEC 27001. It aims to provide a comprehensive understanding of the best practices of an ISMS and a framework for its continual management and improvement.By enrolling on this course you agree to your personal information being passed to PECB.CertificationAfter successfully passing the exam, you can apply for one of the following credentials with PECB. You will receive the certificate once you comply with all the requirements related to your selected credential.PECB Certified ISO/IEC 27001 Provisional ImplementerPECB Certified ISO/IEC 27001 ImplementerPECB Certified ISO/IEC 27001 Lead ImplementerPECB Certified ISO/IEC 27001 Senior Lead ImplementerGeneral informationParticipants will be provided with the training course material containing over 450 pages of explanatory information, examples, best practices, exercises, and quizzes.Learners may reach out to PECB to request the Attestation of Course Completion as proof of taking the course, this can be requested before taking the exam or after and is worth 31 CPD (Continuing Professional Development) credits.In case candidates fail the exam, they can retake it within 12 months following the initial attempt for free.PrerequisitesThe main requirement for participating in this training course is having a general knowledge of the ISMS concepts and ISO/IEC 27001.The fee for this course covers:Course Materials (for lifetime, please note that updated course materials are not included)First ExamOne resit exam (if required)PECB Certification FeeFirst Year PECB Annual Maintenance Fee (AMF)

COURSE OUTLINEThe relationship between ISO/IEC 27701, ISO 27001 and ISO 27002The information security risk assessment related to privacy dataThe privacy risk assessment processControls used to protect the information security of privacy dataControls used for being a data controllerControls used for being a data processorPRE-REQUISITESBasic working knowledge of information security as a userBasic working knowledge of privacy regulations (EU GDPR or HK PDPO) is not essential but is preferred to appreciate the implementation of the ISO/IEC 27701 standard.Candidates who are familiar with ISMS but is not trained on the EU GDPR could consider taking a course on GDPR prior to this course.PROFESSIONAL TRAINERLead Tutor Profile:Certified Information Systems Auditor (CISA)Certified Information Security Manager (CISM)Certified Data Privacy Solutions Engineer (CDPSE)Lead Auditors in ISO/IEC 27701, ISO/IEC 27001, CSA STAR, ISO/IEC 27017 (cloud security), ISO/IEC 27018 (privacy on public cloud)IRCA ISO/IEC 27001 Lead Auditor Course trainerEU GDPR trainer25 years audit experience covering over 1200 man-day and over 400 companies.(SGS Hong Kong Ltd. reserves the right of final tutor arrangement)CERTIFICATION (Attendance: 100%)Delegates who successfully completed the course will be issued a certificate by SGS Hong Kong Limited.GENERAL INFORMATIONVenue: T.S.T. / Wan Chai / Sheung Wan Training Centre / HKSTP/ TBCMedium: Cantonese supplemented with English materials*Early Bird Price will be offered to participant whose enrolment is made one month prior to the course or online booking

DescriptionThe objective of this course is to provide you with the knowledge and skills required to perform first, second and third-party audits of Information Security Management Systems (ISMS) against ISO/IEC 27001:2022 (with ISO/IEC 27002), in accordance with ISO 19011 and ISO/IEC 17021, as applicable.IRCA AccreditationWe are accredited by the International Register of Certified Auditors (IRCA) globally. This course is accredited by IRCA, reference number 2549 - PR 373.DisclaimerFor learners undertaking the CQI and IRCA Online Assessment, all aspects relating to examination, proctoring, disqualification decisions, appeals and the issuance of results to the Approved Training Partner (ATP) are the sole responsibility of CQI and IRCA. SGS does not have oversight of, or involvement in, these processes.

The Privacy Information Management Systems (PIMS) standard ISO/IEC 27701 is to enable establish and maintain a PIMS for the governance of processing personal identifiable information (PII). Thousands of organizations have been certified to PIMS since its version in 2019 around the world.The ISO/IEC 27701:2025 standard was released in Oct 2025. The purpose of this course is to provide organizations with an understanding of the differences between ISO/IEC 27701:2019 and ISO/IEC 27701:2025 and facilitates organization on managing the changes.COURSE OUTLINE: • The relationship between ISO/IEC 27701, ISO/IEC 27001 and ISO/IEC 27002• Changes in the 2025 version• Transition strategy for organizations• Changes in organization policies and procedures• Case sharing: common nonconformities and pitfalls in PIMS• Case sharing: identifying controller and processor roles and data streamRemarks:This course does not cover interpretation of ISO 27001:2022 requirements. Delegates who are not familiar with the requirements should attend (ITFTC) Information Security Management System Series: ISO 27001:2022 – Standard Interpretation and Requirement Training Course first.PROFESSIONAL TRAINERLead Tutor Profile:Certified Information Systems Auditor (CISA)Certified Information Security Manager (CISM)Certified Data Privacy Solutions Engineer (CDPSE)Lead Auditors in ISO/IEC 27701, ISO/IEC 27001, CSA STAR, ISO/IEC 27017 (cloud security), ISO/IEC 27018 (privacy on public cloud)IRCA ISO/IEC 27001 Lead Auditor Course trainerEU GDPR trainer25 years audit experience covering over 1200 man-day and over 400 companies.(SGS Hong Kong Ltd. reserves the right of final tutor arrangement)CERTIFICATION (Attendance: 100%)Delegates who successfully completed the course will be issued a certificate by SGS Hong Kong Limited.GENERAL INFORMATIONVenue: T.S.T. / Wan Chai / Sheung Wan Training Centre / HKSTP/ TBCMedium: Cantonese supplemented with English materials*Early Bird Price will be offered to participant whose enrolment is made one month prior to the course or online booking

Information security management systems (ISMS) are intended to provide organisations with the elements of an effective information security system in order to achieve the best practice in information security and to maintain economic goals. ISO 27001 also provides requirements for ISMS to enable an organisation to establish, implement, operate, monitor, review, maintain and improve a documented ISMS within the context of the organisation’s overall business risks. This course will equip delegates with knowledge and skills required to perform audits of information security management systems against the national and international specifications, standards, statutory requirements and regulations COURSE OUTLINE Introduction to information security management systems Process-based ISMS Audit definition and principles Planning and preparing for the internal audit On-site audit activities Audit reporting and follow-up Auditor competence and certification PROFESSIONAL TRAINERMr. Chris YAU Deputy Director, Products and Services Development, SGS Approved TutorHe is an EuroCloud-Star Auditor and Trainer, Certified CSA STAR Auditor,RABQSA registered ISO/IEC 27001 Lead Auditor, Certified Information Security Auditor (CISA), Certified Information Security Manager (CISM) and Certified Data Privacy Solutions Engineer (CDPSE) with over 15 years of security-related audit and teaching experience including information security in both manufacturing and IT sectors, cargo and freight security. He is also a lead auditor in ISO 9001, ISO 14001, ISO 28000, and ISO 20000.CERTIFICATION (Attendance: 80%) Delegates who successfully completed the course will be issued a certificate by SGS Hong Kong Limited.REMARKSThis course does not cover interpretation of ISO 27001:2022 requirements. Delegates who are not familiar with the requirements should attend (ITFTC) Information Security Management System Series: ISO 27001:2022 – Standard Interpretation and Requirement Training Course first.GENERAL INFORMATION Venue: T.S.T. / Wan Chai / Sheung Wan Training Centre / HKSTP/ TBC Medium: Cantonese supplemented with English materials*Early Bird Price will be offered to participant whose enrolment is made one month prior to the course or online booking

REASONS FOR KNOWING GDPR: The European Union’s General Data Protection Regulation (GDPR) is not just a regulation applicable within EU and only to EU citizens. It has global impacts to all businesses around the world. Many jurisdictions, including China, Japan, South Korea, and even Hong Kong’s PDPO, share many concepts from GDPR:Data subject rightsData breach notificationAccountability and governanceCross-border transfer rulesData minimization and purpose limitationGDPR compliance signals:Strong governanceMature security practicesRespect for customer privacyFor HK companies competing globally -- especially in finance, tech, logistics, and professional services -- this is a differentiator.WHAT MAKES THIS COURSE DIFFERENT FROM OTHER GDPR COURSES: Implementation and real-world examples for each requirement from GDPR & PDPO are shownTrainers are also ISO/IEC 27001 (information security management system) ISO/IEC 27701 (personal information management system) trainer and auditor. Experiences from auditing these standards, and relevance of GDPR & PDPO to these standards will be shared.COURSE OUTLINE: Applicability of GDPR and why it is also appliable to HK companiesResponsibilities of data controller & processor, and other significant definitions in GDPRThe six privacy principlesThe eight data subject rightsSignificant requirements, includingData processing agreementSecurity of processingData protection impact assessmentCross-border data transferBinding corporate rulesData breach notificationSimilarities and differences between GDPR and HK PDPOExamples and case studiesPROFESSIONAL TRAINER:Certified Information Privacy Professional / Europe (CIPP/E) or Certified Data Protection Solutions Engineer (CDPSE)Certified Information Systems Auditor (CISA);ISO/IEC 27701 Lead Auditor, ISO/IEC 27001 Lead Auditor, ISO/IEC 27017 (cloud security), ISO/IEC 27018 (privacy on public cloud) Lead Auditor, ISO/IEC 27001 Lead Auditor Course trainerEU GDPR trainerCERTIFICATION (Attendance: 100%)Learners who successfully completed the course with full attendance will be issued a certificate by SGS Hong Kong Limited.GENERAL INFORMATIONVenue: T.S.T. / Kwun Tong / Jordon / Wan Chai / Sheung Wan Training Centre / HKSTP/ TBCMedium: Cantonese supplemented with English materials*Early Bird Price will be offered to participant whose enrolment is made one month prior to the course or online booking

This course is designed to provide the participants an understanding of the ISO/IEC 27701:2025 standard, how it could be used to implement a Privacy Information Management System (PIMS), and the techniques to conduct an internal audit of a PIMS. Upon completing this course, the participants should be able to plan, conduct and report an internal audit of an PIMS.COURSE OUTLINE: The structure of ISO/IEC 27701 and its relationship with ISO/IEC 27001The information security risk assessment related to privacy dataThe privacy risk assessment process Controls used to protect the information security of privacy dataControls used for being a data controllerControls used for being a data processorAuditing techniques for the requirements and controlsIdentifying and writing non-conformities for PIMSPROFESSIONAL TRAINER:Certified Information Privacy Professional / Europe (CIPP/E) or Certified Data Protection Solutions Engineer (CDPSE)Certified Information Systems Auditor (CISA);ISO/IEC 27701 Lead Auditor, ISO/IEC 27001 Lead Auditor, ISO/IEC 27017 (cloud security), ISO/IEC 27018 (privacy on public cloud) Lead Auditor, ISO/IEC 27001 Lead Auditor Course trainerEU GDPR trainerPRE-REQUISITES: Previous experience of ISO/IEC 27001 (information security) or other management systems such as ISO 9001 is not required but recommended.Familiarity with privacy regulations such as EU GDPR or HK PDPO is suggested in order to appreciate the requirements and controls of the ISO/IEC 27701 standard. Participant who is not trained on the privacy laws is recommended to taking a course on privacy laws (ITPDPO) prior to this course.CERTIFICATION (Attendance: 100%)Learners who successfully completed the course with full attendance will be issued a certificate by SGS Hong Kong Limited.GENERAL INFORMATIONVenue: T.S.T. / Kwun Tong / Jordon / Wan Chai / Sheung Wan Training Centre / HKSTP/ TBCMedium: Cantonese supplemented with English materials*Early Bird Price will be offered to participant whose enrolment is made one month prior to the course or online booking

Training Coupon – HKD 500 Value (Pay Only HKD 400)Purchase this HKD 500 training coupon for just HKD 400 and enjoy access to our premium training programs.Perfect for upgrading your skills, attending workshops, or exploring new learning opportunities.Key Benefits✅ Save 20% instantly on training fees✅ Flexible usage across selected courses✅ Valid for 6 months from purchase dateHow to Purchase?1. Create an account and add the coupon to your cart for checkout.2. An invoice will be provided after purchase.3. The SGS Academy team will contact you and send the e-coupon within 3 working days.How to Use the Coupon?Contact the SGS Academy team by email HK.Academy.Admin@sgs.com with your selected course and class dates.Special denomination gift vouchers are also available!For inquiries, please contact us by email: HK.Academy.Admin@sgs.com or by phone +852 2765 3530.

Training Coupon – HKD 1,000 Value (Pay Only HKD 800)Purchase this HKD 1,000 training coupon for just HKD 800 and enjoy access to our premium training programs.Perfect for upgrading your skills, attending workshops, or exploring new learning opportunities.Key Benefits✅ Save 20% instantly on training fees✅ Flexible usage across selected courses✅ Valid for 6 months from purchase dateHow to Purchase?1. Create an account and add the coupon to your cart for checkout.2. An invoice will be provided after purchase.3. The SGS Academy team will contact you and send the e-coupon within 3 working days.How to Use the Coupon?Contact the SGS Academy team by email HK.Academy.Admin@sgs.com with your selected course and class dates.Special denomination gift vouchers are also available!For inquiries, please contact us by email: HK.Academy.Admin@sgs.com or by phone +852 2765 3530.

SGS has designed this eLearning course to empower professionals with the knowledge and practical introduction to ISO/IEC 27001:2022.