Let’s make it work for you
Overview
This course equips professionals with the knowledge and practical skills required to establish, implement, manage, and continually improve a privacy information management system (PIMS) based on ISO/IEC 27701. Designed for organisations managing personally identifiable information (PII), the course explores how to strengthen privacy governance, support regulatory compliance, and build trust through effective privacy information management.
Participants will gain a detailed understanding of ISO/IEC 27701 requirements, implementation methodologies, privacy risk management, leadership responsibilities, and continual improvement practices. Through practical exercises, scenario-based discussions, and implementation guidance, learners will develop the confidence to support privacy initiatives that align with organisational goals. The course also prepares delegates for the PECB Certified ISO/IEC 27701 Lead Implementer examination and supports the development of applied privacy management capabilities across the organisation.
Prerequisites
Participants should have:
- A fundamental understanding of information privacy concepts and principles
- Familiarity with information security management concepts and controls
- An awareness of data protection and privacy requirements within organisations
Target audience
This course is designed for:
- Managers and consultants involved in privacy and data management
- Professionals responsible for implementing or maintaining a privacy information management system
- Information security and compliance professionals supporting privacy governance initiatives
- PIMS implementation team members and project managers
- Individuals seeking to develop expertise in ISO/IEC 27701 implementation and certification readiness
- Organisations looking to strengthen privacy management capabilities and improve protection of personally identifiable information
Delegates will learn how to
By the end of this course, learners will be able to:
- Explain the principles, concepts, and structure of a privacy information management system based on ISO/IEC 27701
- Interpret ISO/IEC 27701 requirements from the perspective of a lead implementer
- Initiate and plan a PIMS implementation using recognised best practices and the PECB IMS2 Methodology
- Conduct a baseline review to assess an organisation’s current privacy management maturity
- Develop and implement privacy controls and objectives for PII controllers and PII processors
- Apply risk assessment and treatment approaches to support effective privacy protection
- Support leadership engagement, communication, awareness, and documented information management throughout the implementation lifecycle
- Monitor, measure, maintain, and continually improve the effectiveness of a PIMS
- Prepare an organisation for an ISO/IEC 27701 certification audit
- Demonstrate the practical knowledge required to complete the PECB Certified ISO/IEC 27701 Lead Implementer examination
Outline
Introduction to ISO/IEC 27701 and privacy information management
- Introduction to privacy information management systems
- The purpose and benefits of ISO/IEC 27701
- Understanding the relationship between ISO/IEC 27701 and ISO/IEC 27001
- Privacy governance and organisational responsibilities
- Key terminology, definitions, and principles
- Understanding personally identifiable information and privacy obligations
- Roles of PII controllers and PII processors
- Regulatory and stakeholder expectations surrounding privacy management
Initiating a PIMS implementation
- Understanding organisational context and stakeholder requirements
- Defining the scope of a privacy information management system
- Establishing leadership commitment and accountability
- Developing a PIMS implementation strategy
- Conducting a baseline review of current privacy management practices
- Identifying gaps against ISO/IEC 27701 requirements
- Defining implementation objectives, milestones, and success measures
- Building awareness and engagement across the organisation
- Planning a PIMS implementation
- Applying the Plan-Do-Check-Act methodology
- Establishing privacy objectives aligned to organisational goals
- Understanding privacy risk assessment and treatment processes
- Identifying privacy risks associated with processing personally identifiable information
- Selecting and implementing privacy controls
- Defining policies, procedures, and governance structures
- Developing implementation documentation and records management processes
- Planning communication, competence, and awareness activities
Implementing a privacy information management system
- Implementing operational privacy controls and processes
- Supporting PII controller responsibilities
- Supporting PII processor responsibilities
- Managing privacy-related documented information
- Integrating privacy management into organisational operations
- Establishing monitoring and reporting mechanisms
- Managing third-party and supplier privacy considerations
- Supporting collaboration between information security, compliance, legal, and operational teams
- Aligning privacy management activities with wider organisational risk and governance initiatives
Monitoring, measurement, and continual improvement
- Monitoring the performance and effectiveness of the PIMS
- Conducting internal reviews and performance evaluations
- Measuring implementation outcomes and privacy objectives
- Managing nonconformities and corrective actions
- Supporting continual improvement activities
- Preparing for management reviews and certification readiness
- Understanding certification audit processes and expectations
- Building long-term privacy capability and organisational resilience
Preparing for the PECB certification exam
- Overview of the PECB Certified ISO/IEC 27701 Lead Implementer examination
- Understanding exam competency domains
- Review of implementation concepts, methodologies, and best practices
- Practice questions, quizzes, and scenario-based discussions
- Guidance for exam preparation and certification progression
Exams and assessments
Participants will complete knowledge checks, practical discussions, implementation exercises, and quizzes throughout the course to reinforce understanding and support exam readiness.
The course includes the PECB Certified ISO/IEC 27701 Lead Implementer examination, which is completed after the course directly through PECB. Certification and examination fees are included within the course price. Learners who do not pass the first exam attempt are eligible for one free retake within 12 months of course completion, in line with PECB policies.
Hands-on learning
This course includes:
- Practical implementation exercises aligned to real-world privacy management scenarios
- Guided discussions focused on PII controller and PII processor responsibilities
- Privacy risk assessment and treatment activities
- Scenario-based workshops supporting implementation planning and continual improvement
- Instructor-led reviews of implementation challenges, audit preparation, and best practices
- A digital copy of the latest ISO/IEC 27701 standard
Frequently asked questions
How can I create an account on myQA.com?
There are a number of ways to create an account. If you are a self-funder, simply select the "Create account" option on the login page.
If you have been booked onto a course by your company, you will receive a confirmation email. From this email, select "Sign into myQA" and you will be taken to the "Create account" page. Complete all of the details and select "Create account".
If you have the booking number you can also go here and select the "I have a booking number" option. Enter the booking reference and your surname. If the details match, you will be taken to the "Create account" page from where you can enter your details and confirm your account.
Find more answers to frequently asked questions in our FAQs: Bookings & Cancellations page.
How do QA’s virtual classroom courses work?
Our virtual classroom courses allow you to access award-winning classroom training, without leaving your home or office. Our learning professionals are specially trained on how to interact with remote attendees and our remote labs ensure all participants can take part in hands-on exercises wherever they are.
We use the WebEx video conferencing platform by Cisco. Before you book, check that you meet the WebEx system requirements and run a test meeting to ensure the software is compatible with your firewall settings. If it doesn’t work, try adjusting your settings or contact your IT department about permitting the website.
How do QA’s online courses work?
QA online courses, also commonly known as distance learning courses or elearning courses, take the form of interactive software designed for individual learning, but you will also have access to full support from our subject-matter experts for the duration of your course.
Once you have purchased the Online course and have completed your registration, you will receive the necessary details to enable you to immediately access it through our e-learning platform and you can start to learn straight away, from any compatible device. Access to the online learning platform is valid for one year from the booking date.
All courses are built around case studies and presented in an engaging format, which includes storytelling elements, video, audio and humour. Every case study is supported by sample documents and a collection of Knowledge Nuggets that provide more in-depth detail on the wider processes.
When will I receive my joining instructions?
Joining instructions for QA courses are sent two weeks prior to the course start date, or immediately if the booking is confirmed within this timeframe. For course bookings made via QA but delivered by a third-party supplier, joining instructions are sent to attendees prior to the training course, but timescales vary depending on each supplier’s terms. Read more FAQs.
When will I receive my certificate?
Certificates of Achievement are issued at the end the course, either as a hard copy or via email. Read more here.