ISO 27701 Internal Auditor Training - Botswana

ISO 27701 Internal Auditor Training Course Outline

Module 1: Introduction to ISO 27701:2025

• Introduction
• Scope
• Normative References
• Terms, Definitions, and Abbreviations
• Evolution from ISO 27701:2019 to 2025

Module 2: General Overview of ISO 27701:2025

• Structure of ISO 27701:2025
• Stand-Alone Privacy Information Management System Concept
• Compatibility with Other Management System Standards
• Roles of Customers and Interested Parties
• Applicability to Different Types of Organisations

Module 3: Privacy Information Management Fundamentals

• What is Privacy Information Management?
• Importance of Privacy Information Management
• PII Lifecycle and Processing Activities
• Privacy Risks and Organisational Challenges

Module 4: PIMS Requirements – Clauses 4 to 6

• General PIMS Requirements
• Context of the Organisation
• Leadership and Privacy Governance
• Planning and Risk-Based Thinking
• Privacy Objectives and Planning

Module 5: PIMS Support and Operational Requirements

• Support for the Privacy Information Management System
• Competence, Awareness, and Communication
• Documented Information and Control
• Operational Planning and Control
• Managing Changes within the PIMS

Module 6: Personally Identifiable Information (PII)

• What Is Personally Identifiable Information (PII)?
• PII Controllers, Joint Controllers, and PII Processors
• Sensitive and Non-Sensitive PII
• Safeguarding PII and Privacy Principles
• PII vs Personal Data Terminology

Module 7: Privacy Risk Management

• Introduction to Privacy Risk Management
• Privacy Risk Assessment Process
• Privacy Risk Treatment Options
• Statement of Applicability for Privacy Controls
• Integration of Privacy and Information Security Risks

Module 8: PIMS Controls

• PIMS Control Objectives and Controls
• Controls for PII Controllers
• Controls for PII Processors
• Selection and Justification of Controls

Module 9: Introduction to Internal Auditing

• What Is an Internal Audit?
• Roles and Responsibilities of Internal Auditors
• Types of Audits
• Internal Audit Functions within PIMS
• Internal vs External Audits

Module 10: Privacy Information Management System Audit

• Need for Privacy and PIMS Audits
• Audit Criteria and Audit Evidence
• Auditing Against ISO 27701:2025
• Auditing PII Processing Activities
• Audit Documentation Requirements

Module 11: Audit Preparation and Planning

• Audit Objectives, Scope, and Criteria
• Audit Programme and Audit Plan
• Risk-Based Audit Approach
• Audit Team Selection and Responsibilities
• Communication of the Audit Plan

Module 12: Privacy Risk Assessment in Audits

• Auditor Perspective on Privacy Risk
• Evaluating Privacy Risk Assessments
• Assessing Risk Treatment Effectiveness
• Reviewing Statements of Applicability
• Common Privacy Risk Assessment Issues

Who should attend this ISO 27701 Internal Auditor Training Course?

The ISO 27701 Internal Auditor Training Course is designed for professionals, managers, and individuals who want to become proficient in conducting internal audits for Privacy Information Management Systems (PIMS). This course is beneficial for various professionals including:

• Data Protection Officers (DPOs)
• Information Security Managers
• Internal Auditors
• Legal and Compliance Experts
• Risk Management Specialists
• Technology and Software Developers
• Supply Chain Managers
• Facility Managers

Prerequisites for the ISO 27701 Internal Auditor Training Course

There are no formal prerequisites to attend this ISO 27701 Internal Auditor Training Course.

ISO 27701 Internal Auditor Training Course Overview

In today’s digital age, protecting personal data has become a critical responsibility for organisations worldwide. The ISO 27701 Internal Auditor standard provides a framework for a Privacy Information Management System (PIMS), extending ISO 27001 and ISO 27002 standards. This certification helps organisations establish, implement, maintain, and continually improve PIMS, ensuring the privacy of personal information and compliance with global data protection regulations.

Obtaining the ISO 27701 Internal Auditor Certification is essential for professionals responsible for data protection and privacy management. It is particularly valuable for IT Managers, Compliance Officers, Auditors, and Privacy Officers. This training enables professionals to implement effective PIMS, ensuring their organisations adhere to stringent data protection standards and avoid potential legal and reputational risks.

The Knowledge Academy’s 2-day training equips delegates with the knowledge and skills needed to conduct internal audits of PIMS. Delegates will learn to assess compliance with ISO 27701 standards, identify gaps, and recommend improvements. This training ensures that delegates can help their organisations achieve and maintain ISO 27701 standards, enhancing data protection measures and fostering trust among stakeholders.

Course Objectives

• To add a data privacy layer to previous information security standards
• To practice internal auditing skills by conducting detailed process audits
• To learn how to assess the effectiveness of the PIMS controls in organisations
• To get familiar with the techniques to effectively audit and maintain a PIMS
• To overcome the encountered challenges involved in information management
• To understand the framework for PII controllers and processors to manage data privacy

After attending this training course, delegates will be able to reduce risk to the privacy rights of individuals and the organisation by improving the current prevailing Information Security Management System. They will also be able to enhance their auditing capabilities to manage information assets.

What’s included in this ISO 27701 Internal Auditor Training Course?

• ISO 27701 Internal Auditor Examination
• World-Class Training Sessions from Experienced Instructors
• ISO 27701 Internal Auditor Certificate
• Digital Delegate Pack

ISO 27701 Internal Auditor Exam Information

To achieve the ISO 27701 Internal Auditor Training​, candidates will need to sit for an examination. The exam format is as follows: 

• Question Type: Multiple Choice  
• Total Questions: 30 
• Total Marks: 30 Marks 
• Pass Mark: 50%, or 15/30 Marks 
• Duration: 40 Minutes