ISO 27701 Practitioner

Personal Data Protection

Requirements:
  • ISO 27000 Foundation Certification

The new standard is intended for all those who want to maximize the possibilities in the processing of personal data and at the same time comply with the EU GDPR regulation and the Personal Data Protection Act.

It is based on the requirements, principles, procedures and rules for information security management ISO 27001. It complements this standard, or it is an extension of the requirements for the protection of personal data privacy.

And it is the organizations that implement the ISO 27001 standard that will use the new ISO 27701 standard as a manual to expand security measures to include personal data processing in order to achieve compliance with the GDPR regulation and the Personal Data Protection Act.

  • Administrators, Processors and Personal Data Protection Officers

  • Managers and consultants interested in personal data protection

  • Expert advisors who try to process and technically solve the GDPR requirements

What will you learn

More information
  • Ensure transparency between stakeholders
  • Learn to clearly define roles and responsibilities
  • Facilitate the work of the Personal Data Protection Officer
  • Reduce the complexity of linking ISO/IEC 27001 and information security

Terms

Currency
Term
Place
Length
Language
Price without VAT

No results match the specified filters

Loading...

Do you want this course individually?

Let us know!

This course can be customized - either as an individual training 1:1 or for your team. Just leave us your contact and we will contact you with options tailored to your needs.

Successfully sent

We will contact you.

Timeline

1st Day

09:00 – 10:30 Introduction to ISO 27001
  • Principles
  • Processes
Introduction to ISO 27701
  • GDPR
  • Data Protection
10:30 – 10:45 Coffee break
10:45 – 12:15 ISO 27000 vs.
  • Relationship between ISO 27002 and GDPR
  • Relationship between ISO 27701 and GDPR
12:15 – 13:15 Lunch break
13:15 – 14:45 ISO 27702Upgrade for personal data
  • Physical Security
  • Personal Security
14:45 – 15:00 Coffee break
15:00 – 17:00 ISO 27702Upgrade for personal data
  • IT Security
  • Organisational Security

2nd Day

09:00 – 10:30 ISO 27002
  • Upgrade for data controllers
  • Upgrade for personal data processors
10:30 – 10:45 Coffee break
10:45 – 12:15 GDPR and ISO
  • ISO 27701 and Regulation 679/2016
  • Rules for the work of the auditor according to ISO 27701
12:15 – 13:15 Lunch break
13:15 – 14:45 Practical examples
  • Performing a risk analysis
  • Recommending appropriate security measures
14:45 – 15:00 Coffee break
15:00 – 17:00 ISO 27701 CertificationHow we got certified in data protection and you can too!
  • Microsoft case study
  • GDPR Compliance procedure
  • Block length 90 min.
  • Teaching hours 16
  • Refreshments Yes
  • Exam Yes

Get the ISO certification that declares the protection of personal data. ISO 27701 is the new certification standard for data protection.

With the new ISO 27701 standard, you can demonstrate GDPR compliance.

The certification exam takes place during the training on the last day of the course. Candidates who attend the course as a virtual class also take the certification exam online.

Prestigious certification included

ISO 27701 Practitioner Certification

Course graduates will receive an ISO/IEC 27701 Practitioner Certificate.

As part of the certification process, they must demonstrate knowledge of the principles and requirements of ISO/IEC 27701 as an extension of ISMS according to ISO/IEC 27001 and ISO/IEC 27002. The exam verifies the candidates' ability to apply Privacy Information Management System (PIMS) concepts in practice, particularly in the context of GDPR and other global regulations for personal data protection.

The exam topics are:

  • Principles and requirements of ISO/IEC 27701

  • Interconnection of ISMS and PIMS (ISMS vs. PIMS)

  • Roles and responsibilities of PII Controller, Joint Controller, and Processor

  • Personal data protection and risk management associated with PII processing

  • Mapping to GDPR and other related standards (ISO/IEC 27018, ISO/IEC 29151, etc.)

  • Practical aspects of PIMS implementation and auditing

  • Controls and requirements for PII Controllers and PII Processors

Certification instructions

Exam format

Exam format

  • Duration: 60 minutes

  • Number of questions: 30

  • Minimum pass score: 18 points (60%)

  • Language: Czech / English

  • Question type: multiple choice (1 correct answer)

  • Additional conditions: closed book – no materials may be used

Frequently asked questions

All questions

What is ISO?

The International Organization for Standardization is an international non-profit organization based in Geneva, Switzerland. ISO develops and publishes international standards that serve as a reference framework for products, services and systems to ensure quality, efficiency and interoperability at a global level. The standards include various areas such as quality, environment, information security, etc.

What is ISMS and ISO 27001?

ISO 27001 is an international standard that defines the requirements for the introduction, implementation, optimization and continuous improvement of an information security management system.

ISMS (Information Security Management System) is an information security management system. It is a methodological manual, guidelines, policies, goals, work procedures and process management system. Its purpose is to set processes in the organization in such a way that security is maximally enhanced and risks are minimized. And since 100% security does not exist, ISMS also deals with how to minimize the effects of security breaches and security risks.

Can I get an ISO company certification from TAYLLORCOX?

Yes. At Taylorcox, we have developed a unique three-phase certification process that allows us to proceed with unrivaled speed and efficiency.

We will train your employees, prepare a package of complete documentation for you and conduct an internal audit, on the basis of which you will receive confirmation that your company processes comply with strict international standards.