ISO/IEC 27701:2025 Internal Auditors Course

3 days In-person Next: 21 Dec 2026 English / Zh-yue Identifier: 190540713
ISO/IEC 27701:2025 Internal Auditors Course

Course Overview

What you'll learn

To equip the participants a detailed understanding of the requirements of ISO/IEC 27701:2025 and how it is used to perform privacy audits or a privacy information management system (PIMS) audit.

Who This Course Is For

Compliance / privacy / information security practitioner who:

  • Is involved in managing information security and processing of privacy data

  • Wishes to learn about the controls needed to ensure privacy data are properly protected

  • Needs to adopt a management system approach in managing privacy data

  • Conducts privacy or PIMS audits

About this course

This course is designed to provide the participants an understanding of the ISO/IEC 27701:2025 standard, how it could be used to implement a Privacy Information Management System (PIMS), and the techniques to conduct an internal audit of a PIMS. Upon completing this course, the participants should be able to plan, conduct and report an internal audit of an PIMS.

COURSE OUTLINE: 

  • The structure of ISO/IEC 27701 and its relationship with ISO/IEC 27001
  • The information security risk assessment related to privacy data
  • The privacy risk assessment process Controls used to protect the information security of privacy data
  • Controls used for being a data controller
  • Controls used for being a data processor
  • Auditing techniques for the requirements and controls
  • Identifying and writing non-conformities for PIMS

PROFESSIONAL TRAINER:

  • Certified Information Privacy Professional / Europe (CIPP/E) or Certified Data Protection Solutions Engineer (CDPSE)
  • Certified Information Systems Auditor (CISA);
  • ISO/IEC 27701 Lead Auditor, ISO/IEC 27001 Lead Auditor, ISO/IEC 27017 (cloud security), ISO/IEC 27018 (privacy on public cloud) Lead Auditor, ISO/IEC 27001 Lead Auditor Course trainer
  • EU GDPR trainer

PRE-REQUISITES: 

  • Previous experience of ISO/IEC 27001 (information security) or other management systems such as ISO 9001 is not required but recommended.
  • Familiarity with privacy regulations such as EU GDPR or HK PDPO is suggested in order to appreciate the requirements and controls of the ISO/IEC 27701 standard. Participant who is not trained on the privacy laws is recommended to taking a course on privacy laws (ITPDPO) prior to this course.

CERTIFICATION (Attendance: 100%)

Learners who successfully completed the course with full attendance will be issued a certificate by SGS Hong Kong Limited.

GENERAL INFORMATION

Venue: T.S.T. / Kwun Tong / Jordon / Wan Chai / Sheung Wan Training Centre / HKSTP/ TBC

Medium: Cantonese supplemented with English materials

*Early Bird Price will be offered to participant whose enrolment is made one month prior to the course or online booking


Not sure if this is right?

Let us help you find the perfect match.

Course Finder