Regulatory Compliance courses

Risk enters every decision in life and work every day, but clearly some decisions need a more structured approach to deal with today’s threats and uncertainty.Revised risk management standard, ISO 31000:2018, delivers a clearer and more concise guide that will help Engineers at all levels to improve their planning skills, help making appropriate decisions and achieve organization objectives.The new version of ISO 31000 is not simply a guidance, it also gives all Engineers a new meaning how to manage Risk tomorrow.COURSE OUTLINEIntroduction of risk management and its terminology;Explain the purpose of benefits of revised ISO 31000 risk management standard;Introduction of the framework, processes and implementation of risk management system ISO 31000:2018 PROFESSIONAL TRAINER The tutor is an experienced risk management tutor who had delivered extensive numbers of course with workshops for public, for utility companies (e.g. CLP Power) and government departments (e.g. EMSD) in past 10 years.CERTIFICATION Delegates who successfully completed the course will be issued a certificate by SGS Hong Kong Limited.GENERAL INFORMATION Venue: T.S.T. / Wan Chai / Sheung Wan/ Jordan Training Centre / HKSTP / TBC Medium: Cantonese supplemented with English materials *Early Bird Price will be offered to participant whose enrolment is made one month prior to the course or online booking**Discount (HK$1,040) will be offered to HKIE Members

Chapter 3 of the Policy Address continues to promote the establishment and review of anti-bribery management systems for all listed companies in Hong Kong, aiming to enhance transparency and disclosure of anti-bribery measures.This aligns with the updated ISO 37001:2025 standard published by the International Organization for Standardization (ISO), which strengthens requirements for integrity, risk management, and global compliance.Course Outline-Introduction to ABMS-Fundamental Principles of ABMS-Overview, Structure and Clauses of ISO 37001:2025-Corporate Governance and Use of Best Practices-Practice Guidance in Operational ImplementationProfessional TrainerLEUNG, Yiu Kei Patrick is the Sustainability Practitioner and he has been in charge of sustainability services more than 8 years including Certification & Assurance Service for Multinational Companies that listed in HK and Government.CertificationDelegates who successfully completed the course will be issued a certificate by SGS HK Limited.General InformationVenue: T.S.T. / Wan Chai / Sheung Wan Training Centre / HKSTP/ TBCMedium: Cantonese supplemented with English materials*Early Bird Price will be offered to participant whose enrolment is made one month prior to the course or online booking

COURSE OUTLINEThe relationship between ISO/IEC 27701, ISO 27001 and ISO 27002The information security risk assessment related to privacy dataThe privacy risk assessment processControls used to protect the information security of privacy dataControls used for being a data controllerControls used for being a data processorPRE-REQUISITESBasic working knowledge of information security as a userBasic working knowledge of privacy regulations (EU GDPR or HK PDPO) is not essential but is preferred to appreciate the implementation of the ISO/IEC 27701 standard.Candidates who are familiar with ISMS but is not trained on the EU GDPR could consider taking a course on GDPR prior to this course.PROFESSIONAL TRAINERLead Tutor Profile:Certified Information Systems Auditor (CISA)Certified Information Security Manager (CISM)Certified Data Privacy Solutions Engineer (CDPSE)Lead Auditors in ISO/IEC 27701, ISO/IEC 27001, CSA STAR, ISO/IEC 27017 (cloud security), ISO/IEC 27018 (privacy on public cloud)IRCA ISO/IEC 27001 Lead Auditor Course trainerEU GDPR trainer25 years audit experience covering over 1200 man-day and over 400 companies.(SGS Hong Kong Ltd. reserves the right of final tutor arrangement)CERTIFICATION (Attendance: 100%)Delegates who successfully completed the course will be issued a certificate by SGS Hong Kong Limited.GENERAL INFORMATIONVenue: T.S.T. / Wan Chai / Sheung Wan Training Centre / HKSTP/ TBCMedium: Cantonese supplemented with English materials*Early Bird Price will be offered to participant whose enrolment is made one month prior to the course or online booking

DescriptionThe objective of this course is to provide you with the knowledge and skills required to perform first, second and third-party audits of Information Security Management Systems (ISMS) against ISO/IEC 27001:2022 (with ISO/IEC 27002), in accordance with ISO 19011 and ISO/IEC 17021, as applicable.IRCA AccreditationWe are accredited by the International Register of Certified Auditors (IRCA) globally. This course is accredited by IRCA, reference number 2549 - PR 373.DisclaimerFor learners undertaking the CQI and IRCA Online Assessment, all aspects relating to examination, proctoring, disqualification decisions, appeals and the issuance of results to the Approved Training Partner (ATP) are the sole responsibility of CQI and IRCA. SGS does not have oversight of, or involvement in, these processes.

The Privacy Information Management Systems (PIMS) standard ISO/IEC 27701 is to enable establish and maintain a PIMS for the governance of processing personal identifiable information (PII). Thousands of organizations have been certified to PIMS since its version in 2019 around the world.The ISO/IEC 27701:2025 standard was released in Oct 2025. The purpose of this course is to provide organizations with an understanding of the differences between ISO/IEC 27701:2019 and ISO/IEC 27701:2025 and facilitates organization on managing the changes.COURSE OUTLINE: • The relationship between ISO/IEC 27701, ISO/IEC 27001 and ISO/IEC 27002• Changes in the 2025 version• Transition strategy for organizations• Changes in organization policies and procedures• Case sharing: common nonconformities and pitfalls in PIMS• Case sharing: identifying controller and processor roles and data streamRemarks:This course does not cover interpretation of ISO 27001:2022 requirements. Delegates who are not familiar with the requirements should attend (ITFTC) Information Security Management System Series: ISO 27001:2022 – Standard Interpretation and Requirement Training Course first.PROFESSIONAL TRAINERLead Tutor Profile:Certified Information Systems Auditor (CISA)Certified Information Security Manager (CISM)Certified Data Privacy Solutions Engineer (CDPSE)Lead Auditors in ISO/IEC 27701, ISO/IEC 27001, CSA STAR, ISO/IEC 27017 (cloud security), ISO/IEC 27018 (privacy on public cloud)IRCA ISO/IEC 27001 Lead Auditor Course trainerEU GDPR trainer25 years audit experience covering over 1200 man-day and over 400 companies.(SGS Hong Kong Ltd. reserves the right of final tutor arrangement)CERTIFICATION (Attendance: 100%)Delegates who successfully completed the course will be issued a certificate by SGS Hong Kong Limited.GENERAL INFORMATIONVenue: T.S.T. / Wan Chai / Sheung Wan Training Centre / HKSTP/ TBCMedium: Cantonese supplemented with English materials*Early Bird Price will be offered to participant whose enrolment is made one month prior to the course or online booking

Asset management is vitally important for all organizations who care about the overall values and performance over the whole life of their assets.An effective asset management strategy together with systematic implementation of asset management plans can help improve an asset with different aspects of benefit via its life cycle, from its initial start-up to commissioning, operation and maintenance to disposal.COURSE OUTLINEIntroduction of Asset management concepts and definitionsIntroduction of ISO 55000 series standardsBenefits of implementing ISO 55001ISO 55001 requirementsThe implementation and integration of ISO 55001Case sharing and workshops PROFESSIONAL TRAINER The tutor has vast experience in delivering ISO 55001 training course and audits to utility companies (e.g. CLP Power, HK Electric), government departments (e.g. EMSD) and Airport Authority since its launch.CERTIFICATION Delegates who successfully completed the course will be issued a certificate by SGS Hong Kong Limited.GENERAL INFORMATION Venue: T.S.T. / Wan Chai / Sheung Wan/ Jordan Training Centre / HKSTP / TBC Medium: Cantonese supplemented with English materials  *Early Bird Price will be offered to participant whose enrolment is made one month prior to the course or online booking**Discount (HK$1,040) will be offered to HKIE Members

REASONS FOR KNOWING GDPR: The European Union’s General Data Protection Regulation (GDPR) is not just a regulation applicable within EU and only to EU citizens. It has global impacts to all businesses around the world. Many jurisdictions, including China, Japan, South Korea, and even Hong Kong’s PDPO, share many concepts from GDPR:Data subject rightsData breach notificationAccountability and governanceCross-border transfer rulesData minimization and purpose limitationGDPR compliance signals:Strong governanceMature security practicesRespect for customer privacyFor HK companies competing globally -- especially in finance, tech, logistics, and professional services -- this is a differentiator.WHAT MAKES THIS COURSE DIFFERENT FROM OTHER GDPR COURSES: Implementation and real-world examples for each requirement from GDPR & PDPO are shownTrainers are also ISO/IEC 27001 (information security management system) ISO/IEC 27701 (personal information management system) trainer and auditor. Experiences from auditing these standards, and relevance of GDPR & PDPO to these standards will be shared.COURSE OUTLINE: Applicability of GDPR and why it is also appliable to HK companiesResponsibilities of data controller & processor, and other significant definitions in GDPRThe six privacy principlesThe eight data subject rightsSignificant requirements, includingData processing agreementSecurity of processingData protection impact assessmentCross-border data transferBinding corporate rulesData breach notificationSimilarities and differences between GDPR and HK PDPOExamples and case studiesPROFESSIONAL TRAINER:Certified Information Privacy Professional / Europe (CIPP/E) or Certified Data Protection Solutions Engineer (CDPSE)Certified Information Systems Auditor (CISA);ISO/IEC 27701 Lead Auditor, ISO/IEC 27001 Lead Auditor, ISO/IEC 27017 (cloud security), ISO/IEC 27018 (privacy on public cloud) Lead Auditor, ISO/IEC 27001 Lead Auditor Course trainerEU GDPR trainerCERTIFICATION (Attendance: 100%)Learners who successfully completed the course with full attendance will be issued a certificate by SGS Hong Kong Limited.GENERAL INFORMATIONVenue: T.S.T. / Kwun Tong / Jordon / Wan Chai / Sheung Wan Training Centre / HKSTP/ TBCMedium: Cantonese supplemented with English materials*Early Bird Price will be offered to participant whose enrolment is made one month prior to the course or online booking

This course is designed to provide the participants an understanding of the ISO/IEC 27701:2025 standard, how it could be used to implement a Privacy Information Management System (PIMS), and the techniques to conduct an internal audit of a PIMS. Upon completing this course, the participants should be able to plan, conduct and report an internal audit of an PIMS.COURSE OUTLINE: The structure of ISO/IEC 27701 and its relationship with ISO/IEC 27001The information security risk assessment related to privacy dataThe privacy risk assessment process Controls used to protect the information security of privacy dataControls used for being a data controllerControls used for being a data processorAuditing techniques for the requirements and controlsIdentifying and writing non-conformities for PIMSPROFESSIONAL TRAINER:Certified Information Privacy Professional / Europe (CIPP/E) or Certified Data Protection Solutions Engineer (CDPSE)Certified Information Systems Auditor (CISA);ISO/IEC 27701 Lead Auditor, ISO/IEC 27001 Lead Auditor, ISO/IEC 27017 (cloud security), ISO/IEC 27018 (privacy on public cloud) Lead Auditor, ISO/IEC 27001 Lead Auditor Course trainerEU GDPR trainerPRE-REQUISITES: Previous experience of ISO/IEC 27001 (information security) or other management systems such as ISO 9001 is not required but recommended.Familiarity with privacy regulations such as EU GDPR or HK PDPO is suggested in order to appreciate the requirements and controls of the ISO/IEC 27701 standard. Participant who is not trained on the privacy laws is recommended to taking a course on privacy laws (ITPDPO) prior to this course.CERTIFICATION (Attendance: 100%)Learners who successfully completed the course with full attendance will be issued a certificate by SGS Hong Kong Limited.GENERAL INFORMATIONVenue: T.S.T. / Kwun Tong / Jordon / Wan Chai / Sheung Wan Training Centre / HKSTP/ TBCMedium: Cantonese supplemented with English materials*Early Bird Price will be offered to participant whose enrolment is made one month prior to the course or online booking

Training Coupon – HKD 500 Value (Pay Only HKD 400)Purchase this HKD 500 training coupon for just HKD 400 and enjoy access to our premium training programs.Perfect for upgrading your skills, attending workshops, or exploring new learning opportunities.Key Benefits✅ Save 20% instantly on training fees✅ Flexible usage across selected courses✅ Valid for 6 months from purchase dateHow to Purchase?1. Create an account and add the coupon to your cart for checkout.2. An invoice will be provided after purchase.3. The SGS Academy team will contact you and send the e-coupon within 3 working days.How to Use the Coupon?Contact the SGS Academy team by email HK.Academy.Admin@sgs.com with your selected course and class dates.Special denomination gift vouchers are also available!For inquiries, please contact us by email: HK.Academy.Admin@sgs.com or by phone +852 2765 3530.

Training Coupon – HKD 1,000 Value (Pay Only HKD 800)Purchase this HKD 1,000 training coupon for just HKD 800 and enjoy access to our premium training programs.Perfect for upgrading your skills, attending workshops, or exploring new learning opportunities.Key Benefits✅ Save 20% instantly on training fees✅ Flexible usage across selected courses✅ Valid for 6 months from purchase dateHow to Purchase?1. Create an account and add the coupon to your cart for checkout.2. An invoice will be provided after purchase.3. The SGS Academy team will contact you and send the e-coupon within 3 working days.How to Use the Coupon?Contact the SGS Academy team by email HK.Academy.Admin@sgs.com with your selected course and class dates.Special denomination gift vouchers are also available!For inquiries, please contact us by email: HK.Academy.Admin@sgs.com or by phone +852 2765 3530.