ISO/IEC 27701 Foundation: Privacy Information Management System

Foundation level: why that is the right starting point

This is a foundation course. It gives you the concepts and vocabulary of privacy information management without the depth required to implement or audit a full PIMS.

That is deliberately useful for anyone already working with an ISO/IEC 27001 ISMS who needs to understand what changes when personal data enters the picture.

Where to go next

If you need to implement or lead an audit of a privacy information management system, the ISO/IEC 27701 Lead Implementer and Lead Auditor courses build directly on this material.

What you will learn

• Describe privacy information management concepts and principles
• Explain the main ISO/IEC 27701 requirements for a privacy information management system
• Identify actions organisations can take to achieve conformity to ISO/IEC 27701
• Recognise how a PIMS extends an existing ISO/IEC 27001 ISMS

Course content

1. 1. Privacy information management fundamentals

   Core concepts, principles and the scope of a privacy information management system (PIMS).

2. 2. ISO/IEC 27701 requirements

   Clause-by-clause requirements and additional controls for PII controllers and processors.

3. 3. Relationship to ISO/IEC 27001

   How a PIMS extends an existing ISMS rather than replacing it.

4. 4. Certification and continual improvement

   What the certification process involves and how a PIMS is expected to mature.

Exam and certification

Closed-book written exam delivered online through PECB Exams. Duration: 1 hour.

Your fee includes your first exam attempt and one free retake within 12 months. After passing, you can apply for the relevant PECB credential.