ISO 27701 Lead Implementer Training - United States

ISO 27701 Lead Implementer Training Course Outline

Module 1: Introduction to ISO 27701

• Introduction
• Scope
• Terms, Definitions, and Abbreviations

Module 2: General

• Structure of this Document
• Application of ISO/IEC 27001:2013 Requirements
• Application of ISO/IEC 27002:2013 Guidelines
• Customer

Module 3: Information Management

• What is Information Management?
• Importance of Information Management
• Areas of Information Management
• Challenges Involved in Information Management

Module 4: PIMS-Specific Requirements Related to ISO/IEC 27001

• General
• Context of the Organization
• Leadership
• Planning
• Support
• Operation
• Performance Evaluation
• Improvement

Module 5: PIMS-Specific Guidance Related to ISO/IEC 27002

• General
• Information Security Policies
• Organization of Information Security
• Human Resource Security
• Asset Management
• Access Control
• Cryptography
• Physical and Environmental Security
• Operations Security
• Communications Security
• Systems Acquisition, Development, and Maintenance
• Supplier Relationships
• Information Security Incident Management
• Information Security Aspects of Business Continuity Management
• Compliance

Module 6: Personally Identifiable Information (PII)

• What is Personally Identifiable Information (PII)?
• Compliance Environment
• PII Security Controls
• Sensitive Vs Non-Sensitive PII
• Safeguarding PII
• PII Vs Personal Data

Module 7: Introduction to Internal Auditing

• What is Internal Audit?
• Who is Internal Auditor?
• Types of Internal Audit
• Internal Audit Functions
• Internal Vs External Audit

Module 8: Information System Audit

• Need for Information System Audit
• Information System Auditing Standards
• Auditing Guidelines

Module 9: Audit Preparation and Planning

• Audit Scope and Charter
• Audit Planning
• Risk-Based Approach
• Audit Staffing
• Audit Schedule
• Communication of Audit Plan
• Computer Assisted Auditing Techniques

Module 10: Information Security Risk Assessment

• Introduction to Risk Management
• Why Perform an Information Security Risk Assessment?
• Principles of Risk Assessment
• Risk Assessment Process
• Quantitative Vs Qualitative Security Risk Assessment Methods

Module 11: Additional ISO/IEC 27002 Guidance for PII Controllers and Processors

• General
• Conditions for Collection and Processing
• Obligations to PII Principals
• Privacy by Design and Privacy by Default
• PII Sharing, Transfer, and Disclosure

Module 12: Implementation of Information Management System

• Steps for Successful Systems Implementation
• Considerations When Implementing an Information Management System
• Potential Pitfalls of New IT System Implementation

Module 13: Implement ISO 27701

• Requirements of ISO 27701
• Why Implementing ISO 27701:2019 Matters?
• Managing Personal Information with ISO/IEC 27701
• Common Fallacies in Implementing ISO 27701
• Maintenance and Continuous Improvement

Module 14: Correlation Between ISO/IEC 27701, ISO/IEC 27001, and ISO/IEC 27002

• Relationship Between ISO/IEC 27701, ISO/IEC 27001, and ISO/IEC 27002
• How Does ISO 27701 Relate to ISO 27001?
• Implement Security Controls
• Be Compliant with the GDPR, ISO 27001, and ISO 27002

Module 15: PII Compliance

• What is PII Compliance?
• PII Data Classification
• PII Compliance Checklist
• Identify and Classify PII
• Create a PII Compliance Policy
• Implement Data Security Tools
• Practice IAM
• Monitor and Respond

Module 16: Logging and Monitoring

• Event Logging
• References ISO 27002 Control 8.15
• Event Types
• Log Protection
• Log Analysis
• Log Monitoring
• Protection of Log Information
• Clock Synchronization

Who should attend this ISO 27701 Lead Implementer Training Course?

Lead Implementation Training Course comes in to play for the individuals who aspire to undertake leading role maintaining and implementing the Privacy Information Management System based on the ISO 27701 standards. This course is beneficial for various professionals including:

• Compliance Managers
• Project Managers
• Corporate Social Responsibility (CSR) Managers
• Facility Managers
• Energy Management Specialists
• HR Managers
• Privacy Officers

Prerequisites for the ISO 27701 Lead Implementer Training Course

There are no formal prerequisites for attending this ISO 27701 Lead Implementer Training Course.

ISO 27701 Lead Implementer Training Course Overview

ISO Management System 27701 Training in the United States has been created in order to be enabled by sector-specific norms which can be added without building up new Management System. By adhering to a well-tested information system implementation process, inclusive of minimizing disruption to the business to any great extent, IT systems can be smoothly integrated in business operations.

This ISO 27701 Training in the United States is designed to equip the participants with an understanding of the procedures determining how to implement, achieve, and monitor information system security control from the ISO 27701 standard perspective. People who demonstrate a high level of proficiency in information security management will scale natural corporate ladders as they get into the ranks of top multinational organizations.

Knowledge Academy’s 3-day training course in the United States on ISO 27701 Lead implementer will give dealers in-depth technicalities in privacy information management, and how to apply them effectively. In this kind of process, the delegates are to be trained in information system audit to increase reliability, security and accuracy of the information system.

Course Objectives

• To maintain conformance with data privacy regimes requirements
• To store and analyze a tremendous amount of data and information
• To manage information privacy using ISO 27701 standard guidelines
• To implement either separately or as a combined management system
• To interview employees to ensure that they understand processes and policies
• To conduct tests to see how the management system works after implementation

After completing this training in the United States, delegates will be able to implement and manage PIMS according to the guidance of the ISO 27701 standard and required changes to extend Information Security Management System (ISMS). They will also be able to apply their skills as PII controllers and PII processors holding responsibility and accountability for PII processing.

What’s included in this ISO 27701 Lead Implementer Training Course?

• ISO 27701 Lead Implementer Examination
• World-Class Training Sessions from Experienced Instructors
• ISO 27701 Lead Implementer Certificate
• Digital Delegate Pack

ISO 27701 Lead Implementer Exam Information

To achieve the ISO 27701 Lead Implementer Training, candidates will need to sit for an examination. The exam format is as follows: 

• Question Type: Multiple Choice 
• Total Questions: 30 
• Total Marks: 30 Marks 
• Pass Mark: 50%, or 15/30 Marks 
• Duration: 40 Minutes