ISO/IEC 27701:2025 Internal Auditors Course
Course Overview
What you'll learn
To equip the participants a detailed understanding of the requirements of ISO/IEC 27701:2025 and how it is used to perform privacy audits or a privacy information management system (PIMS) audit.
Who This Course Is For
Compliance / privacy / information security practitioner who:
-
Is involved in managing information security and processing of privacy data
-
Wishes to learn about the controls needed to ensure privacy data are properly protected
-
Needs to adopt a management system approach in managing privacy data
-
Conducts privacy or PIMS audits
About this course
This course is designed to provide the participants an understanding of the ISO/IEC 27701:2025 standard, how it could be used to implement a Privacy Information Management System (PIMS), and the techniques to conduct an internal audit of a PIMS. Upon completing this course, the participants should be able to plan, conduct and report an internal audit of an PIMS.
COURSE OUTLINE:
- The structure of ISO/IEC 27701 and its relationship with ISO/IEC 27001
- The information security risk assessment related to privacy data
- The privacy risk assessment process Controls used to protect the information security of privacy data
- Controls used for being a data controller
- Controls used for being a data processor
- Auditing techniques for the requirements and controls
- Identifying and writing non-conformities for PIMS
PROFESSIONAL TRAINER:
- Certified Information Privacy Professional / Europe (CIPP/E) or Certified Data Protection Solutions Engineer (CDPSE)
- Certified Information Systems Auditor (CISA);
- ISO/IEC 27701 Lead Auditor, ISO/IEC 27001 Lead Auditor, ISO/IEC 27017 (cloud security), ISO/IEC 27018 (privacy on public cloud) Lead Auditor, ISO/IEC 27001 Lead Auditor Course trainer
- EU GDPR trainer
PRE-REQUISITES:
- Previous experience of ISO/IEC 27001 (information security) or other management systems such as ISO 9001 is not required but recommended.
- Familiarity with privacy regulations such as EU GDPR or HK PDPO is suggested in order to appreciate the requirements and controls of the ISO/IEC 27701 standard. Participant who is not trained on the privacy laws is recommended to taking a course on privacy laws (ITPDPO) prior to this course.
CERTIFICATION (Attendance: 100%)
Learners who successfully completed the course with full attendance will be issued a certificate by SGS Hong Kong Limited.
GENERAL INFORMATION
Venue: T.S.T. / Kwun Tong / Jordon / Wan Chai / Sheung Wan Training Centre / HKSTP/ TBC
Medium: Cantonese supplemented with English materials
*Early Bird Price will be offered to participant whose enrolment is made one month prior to the course or online booking