ISO 27701 Lead Auditor Training - United States

ISO 27701 Lead Auditor Training Course Outline

Module 1: Introduction to ISO 27701

• Introduction
• Scope
• Normative References
• Terms, Definitions, and Abbreviations

Module 2: General

• Structure of this Document
• Application of ISO/IEC 27001:2013 Requirements
• Application of ISO/IEC 27002:2013 Guidelines
• Customer

Module 3: Information Management

• What is Information Management?
• Importance of Information Management
• Areas of Information Management
• Challenges Involved in Information Management

Module 4: PIMS-Specific Requirements Related to ISO/IEC 27001

• General
• Context of the Organization
• Leadership
• Planning
• Support
• Operation
• Performance Evaluation
• Improvement

Module 5: PIMS-Specific Guidance Related to ISO/IEC 27002

• General
• Information Security Policies
• Organization of Information Security
• Human Resource Security
• Asset Management
• Access Control
• Cryptography
• Physical and Environmental Security
• Operations Security
• Communications Security
• Systems Acquisition, Development, and Maintenance
• Supplier Relationships
• Information Security Incident Management
• Information Security Aspects of Business Continuity Management
• Compliance

Module 6: Personally Identifiable Information (PII)

• What is Personally Identifiable Information (PII)?
• Compliance Environment
• PII Security Controls
• Sensitive Vs Non-Sensitive PII
• Safeguarding PII
• PII Vs Personal Data

Module 7: Introduction to Internal Auditing

• What is Internal Audit?
• Who is an Internal Auditor?
• Types of Internal Audit
• Internal Audit Functions
• Internal Vs External Audit

Module 8: Information System Audit

• Need for Information System Audit
• Information System Auditing Standards
• Auditing Guidelines

Module 9: Audit Preparation and Planning

• Audit Scope and Charter
• Audit Planning
• Risk-Based Approach
• Audit Staffing
• Audit Schedule
• Communication of Audit Plan
• Computer-Assisted Auditing Techniques

Module 10: Information Security Risk Assessment

• Introduction to Risk Management
• Why Perform an Information Security Risk Assessment?
• Principles of Risk Assessment
• Risk Assessment Process
• Quantitative Vs Qualitative Security Risk Assessment Methods

Module 11: Additional ISO/IEC 27002 Guidance for PII Controllers and Processors

• General
• Conditions for Collection and Processing
• Obligations to PII Principals
• Privacy by Design and Privacy by Default
• PII Sharing, Transfer, and Disclosure

Module 12: Implementation of Information Management System

• Steps for Successful Systems Implementation
• Considerations When Implementing an Information Management System
• Potential Pitfalls of New IT System Implementation

Module 13: Implementing ISO 27701

• Requirements of ISO 27701
• Why Implementing ISO 27701:2019 Matters?
• Managing Personal Information with ISO/IEC 27701
• Common Fallacies in Implementing ISO 27701
• Maintenance and Continuous Improvement

Module 14: Correlation Between ISO/IEC 27701, ISO/IEC 27001, and ISO/IEC 27002

• Relationship Between ISO/IEC 27701, ISO/IEC 27001, and ISO/IEC 27002
• How Does ISO 27701 Relate to ISO 27001?
• Implement Security Controls
• Be Compliant with the GDPR, ISO 27001, and ISO 27002

Module 15: PII Compliance

• What is PII Compliance?
• PII Data Classification
• PII Compliance Checklist
  • Identify and Classify PII
  • Create a PII Compliance Policy
  • Implement Data Security Tools
  • Practice IAM
  • Monitor and Respond

Module 16: Logging and Monitoring

• Event Logging
  • Event Types
  • Log Protection
  • Log Analysis
  • Log Monitoring
• Clock Synchronization
  • Control
  • Implementation Guidance
  • Other Information

Module 17: Lead Auditor

• Introduction to Lead Auditor
• Responsibilities of Lead Auditor
• Management Tools for ISO Auditors
• Protecting PII

Module 18: On-Site Audit Activities

• Opening Meeting
• Document Review
• Detailed Site Inspection
• Staff Interview
• Review Audit Evidence
• Closing Meeting

Module 19: Conducting an Audit

• Audit Methodology
• Pre-Audit Activities
• Information System Audit Process
• Documenting Observations and Findings

Module 20: Follow-Up Activities

• Usage of Audit Reports
• Reporting of Information System Audit Report
• Follow Up Audit Procedure

Who should attend this ISO 27701 Lead Auditor Training Course?

The ISO 27701 Lead Auditor Training Course offered in the United States is a specific training course for managers, and those who aspire to carry out lead audits at Privacy Information Management Systems (PIMS) that are aligned with the ISO 27701 standard. The following professionals will benefit from this course:

• Information Security Managers
• Experienced Internal Auditors
• Quality Managers
• Marketing and Customer Relations Managers
• Corporate Social Responsibility (CSR) Managers
• Technology and Software Developers
• Legal and Compliance Experts

Prerequisites for the ISO 27701 Lead Auditor Training Course

There are no formal prerequisites for attending this ISO 27701 Lead Auditor Training Course.

ISO 27701 Lead Auditor Training Course Overview

ISO 27701 addresses to all consumers, 3rd party groups as well as internal stakeholders that their system of data security and the implementation of GDPR and other privacy laws are carried out. The training aims at identifying privacy features consist of PII managing, that is, of processing Personally Identifiable Information (PII).

This training assists organizations in how to manage personal information and audit processes to demonstrate compliance with global privacy rules. Studying this ISO 27701 Training in the United States helps learners build trust with companies by reducing risks to data subjects' privacy rights and allowing for better administration of privacy measures. Mastering these skills in this training would be the perfect leverage for a speedy and sparkling professional advancement and job opportunities growth in this field.

At this 5-day ISO/IEC 27701 Lead Auditor training course in the United States, the participants will give their knowledge about understanding how an audit the Privacy Information Management System (PIMS) is carried out. They will gather relevant skills to direct the delivery of qualified audits by conforming to the requirements of ISO 19011 and ISO 17021-1 certifications. What's more, students will reliably learn how to lower the risks of security issues and keep their business from any negative impact to its reputation.

Course Objectives

• To obtain knowledge about improving the organization’s PIMS
• To understand how to manage the security of services and data
• To gain deep knowledge about systems acquisition, development, and maintenance
• To acquire skills to handle controller and processor-specific controls
• To identify and prioritize risks according to the organization’s specific needs
• To learn about essential steps for successful systems implementation

After completing ISO 27701 Training in the United States, delegates will be able to establish communication with customers and resolve potential conflicts. They will also be able to facilitate partnerships with other businesses where the international recognition of the company’s conformity to international standards.

What’s included in this ISO 27701 Lead Auditor Training Course?

• ISO 27701 Lead Auditor Examination
• World-Class Training Sessions from Experienced Instructors
• ISO 27701 Lead Auditor Certificate
• Digital Delegate Pack

ISO 27701 Lead Auditor Exam Information

To achieve the ISO 27701 Lead Auditor Training, candidates will need to sit for an examination. The exam format is as follows: 

• Question Type: Multiple Choice 
• Total Questions: 30 
• Total Marks: 30 Marks 
• Pass Mark: 50%, or 15/30 Marks 
• Duration: 40 Minutes