Data Protection 27701 Lead Implementer – ISO 27001 training

Introdução

This course is available to be delivered in a classroom and > Live Online Training <

In this course, the students will acquire the expertise to develop a Privacy Information Management System (PIMS), established according to the requirements of the ISO/IEC 27701 International Standard and in compliance with GDPR and related privacy regulations and legislation.

The course presents a holistic implementation approach based on a PIMS methodology, supported by the requirements of ISO/IEC 27701, GDPR, the European Data Protection Board (EDPB) guidelines, and related privacy and data protection best practices from ENISA and NIST, and other recognized standards, practices, and frameworks, such as the ISO/IEC 27001, ISO/IEC 27002, ISO/IEC 29100, among others.

During the course participants are invited to implement a PIMS based on a case study. This practice supports the necessary theoretical part of the training and establishes a clear link between theory, regulation and how to do it. In this way, participants are able to transfer the knowledge of training to the job and acquire a greater critical sense about the requirements and their applicability in the organization.

Through discussion and practical exercises based on a real-life case study, the participants will be challenged with a series of exercises, supported by BEHAVIOUR and in-class drafted templates, where the learned knowledge and acquired expertise will come into practice, allowing them to acquire the required competencies to Lead the implementation of a PIMS based on ISO/IEC 27001 and ensuring the preparation for the Certified Data Protection 27701 Lead Implementer certification exam.

The course covers the latest privacy and data protection legislation and related international frameworks and best practices, ensuring that the participants, are equipped with the latest knowledge and toolset to perform their role and stay up to date with the latest developments.

Advancing to the certification exam and applying to one of the credentials of the Data Protection 27701 certification scheme, will allow the participants to showcase their expertise and distinguish themselves from their peers.

Metodologia

This course is based on theorical, and practical sessions supported by a real-world adapted case-study.
The course includes hands-on practical and theorical exercises to:

• better prepare the students for the real-world challenges, and
• to prepare and increase the likelihood of success on the certification exam, and
• train and prepare professionals for participating in a PIMS implementation program, or lead the implementation of a PIMS based in ISO/IEC 27701, ISO/IEC 27001 and in compliance with GDPR and related legal and regulatory requirements

This course is available to be delivered in a > Live Online Training < model and classroom.
Live Training brings you the dynamic environment of the classroom, to your desk. Using your computer, you interact with the trainer and the trainees as if you were with them in the classroom.

Destinatários

• Information Security, Data Protection, IT Consultants, or other IT/IS experts providing data protection services.
• IT professionals involved in the implementation of a GDPR and/or ISO/IEC 27701 program.
• Project managers leading or preparing to lead an ISO/IEC 27701 implementation program.
• Privacy and data protection consultants and/or auditors involved or supporting organizations in the compliance with ISO/IEC 27701 requirements and with other European and Non-European legal and regulatory requirements and frameworks.
• Designated Data Protection Officers (DPOs) for public or private organizations.
• Any professional wanting to acquire the necessary skills to implement a Privacy Information Management System (PIMS) based in ISO/IEC 27701 and in compliance with the EU GDPR.

Pré-Requisitos

Students should understand English as the course documentation is in this language.
Also, other requisites may apply, please check the quotation or the proposal received.

Duração (dias)

5 days

Objectivos Gerais

At the end of the course students should be able to:

• Understand the fundamental privacy, data protection and information security concepts.
• Get to know and understand the GDPR and ISO/IEC 27701 requirements and the correlation between GDPR, ISO/IEC 27701, ISO/IEC 27001, ISO/IEC 27002, ISO 29100 and other privacy management standards and regulatory frameworks.
• Understand the requirements for the implementation of a PIMS based in ISO/IEC 27701, ISO/IEC 27001 and GDPR.
• Establish, implement, maintain, and continually improve a Privacy Information Management System (PIMS, or DPMS), in accordance with the requirements of the ISO/IEC 27701 and ISO/IEC 27001 standards and in compliance with GDPR and related EDPB guidance.
• Advise an organization on the latest data protection best practices in support to the data protection and business objectives.
• Acquire the competencies to Lead the organization on the achievement of the ISO/IEC 27701 and ISO/IEC 27001 certifications and to ensure continuous compliance with the EU GDPR and related data protection legal and regulatory requirements.
• Acquire the required knowledge to succeed in the “BEHAVIOUR Certified Data Protection 27701 Lead Implementer” exam and achieve a personnel certification.

Programa

1. Introduction to GDPR, privacy and data protection concepts and principles; privacy and data protection frameworks; PIMS based on ISO/IEC 27701 and GDPR
   • Course introduction
   • Fundamental concepts and principles of privacy and data protection
   • Privacy and data protection in EU and related frameworks
   • Mapping ISO/IEC 27001, ISO/IEC 27701 and GDPR requirements
   • Preparing for PIMS implementation based on ISO/IEC 27701 and GDPR – approach and methodology
   • Understand the organization drivers and establish the data protection context
   
   
2. Establish (Plan) a PIMS based on ISO/IEC 27701 and GDPR
   • Drafting the PIMS Scope
   • Assess current and target state for Gap Analysis
   • Leadership and commitment for the PIMS Program establishment
   • Draft the Data Protection Policy
   • Establish the PIMS organizational structures
   • Assessment of PIMS risks and opportunities
   • Information Security and Privacy Risk Management
   • Data Protection Objectives
   
   
3. Implement and Operate (Do) a PIMS based on ISO/IEC 27701 and GDPR
   • PIMS resources
   • Competence, training and awareness
   • Communication
   • Documented information process, ISO/IEC 27701 and GDPR documentation
   • Select and draft required documents and templates
   • Draft and Implement controls using the ISO/IEC 27002 best practices and the ISO/IEC 27701 guidelines
   • Transitioning the PIMS to Operations
   
   
4. Monitor and Review (Check) and, Maintain and Improve (Act) a PIMS based on ISO/IEC 27701 and GDPR; Advance for the ISO/IEC 27701 Certification Audit and GDPR Compliance Audits
   • Monitoring, Measurement, Analysis and Evaluation
   • Internal Audit
   • Management Review
   • Managing findings, including nonconformities, and apply corrective actions
   • Continual improvement process
   • Advance for the ISO/IEC 27701 Certification Audit and GDPR Compliance Audits
   • Personnel certification and closing the training

Exame

The “Certified Data Protection 27701 Lead Implementer” exam covers the following competence domains:

• Domain 1: Concepts and principles of privacy and data protection
• Domain 2: EU GDPR and ISO/IEC 27701 and related data protection frameworks
• Domain 3: Establish (Plan) a PIMS based on ISO/IEC 27701 and GDPR
• Domain 4: Implement and Operate (Do) a PIMS based on ISO/IEC 27701 and GDPR
• Domain 5: Monitor and Review (Check) a PIMS based on ISO/IEC 27701 and GDPR
• Domain 6: Maintain and Improve (Act) a PIMS based on ISO/IEC 27701 and GDPR
• Domain 7: Advance for the ISO/IEC 27701 Certification Audit and GDPR Compliance Audits

Language(s): English and Portuguese (please consult BEHAVIOUR for availability on additional languages).
Duration: 3 hours (240 minutes).
Exam type: Multiple-choice questions based on a main case study and related to the competency domains.
Number of questions: 12 questions.
Passing score: 700/1000 marks.
Results: “Pass or Fail”
If the candidate fails the exam, he is entitled to one free retake within a 2-month period from the released date of the exam result.

Certificação

After successfully completing the certification exam, and signing the agreement/code of ethics, participants may apply for one of the three available credentials for this personnel certification scheme, depending on their level of experience.

• Certified Data Protection 27701 Associate Implementer: no previous experience required.
• Certified Data Protection 27701 Implementer: 2 years of experience in privacy and/or data protection.
• Certified Data Protection 27701 Lead Implementer: 5 years of experience in privacy and/or data protection.
A certificate will be issued to participants who successfully pass the exam and comply with all the other requirements related to the selected credential. Candidates also receive the digital badge of the certification achieved.

The “Certified Data Protection 27701 Lead Implementer” personnel certification program is drafted and maintained according to the ISO/IEC 17024 standard.

The certification programs are only valid to persons (not companies) and the achievement and maintenance depends on the exam result, on the professional experience and the commitment and comply to the agreement/code of ethics. If a professional does not comply with the agreement/code of ethics, the certification is not assigned or is revoked.

Formador

Our specialists are renowned consultants and auditors, with several years of experience in the areas of implementation, auditing and training in data protection worldwide regulations, legislation (including the GDPR and other related), and in the family of the ISO/IEC 27000 standards, with a particular focus on the standards ISO/IEC 27701, ISO/IEC 27001, ISO/IEC 29100, and related standards.

Informações Gerais

• Training in English language.
• Online training material resources in English, with online access, and in accordance with the commercial conditions.
• Practical step-by-step implementation methodology
• Behaviour Digital Participation Certificate of 35 CPD/CPE credits.
• Online Certification Exam in Portuguese or English language. The exam can be taken up to 2 months from the start date of the course.
• If the candidate fails the exam, he is entitled to one free retake within a 2 month period from the date of the exam result.
• Certification Diploma and certification badge after successful examination and formal process registration. This process has no associated cost.

Benefícios

• ISO/IEC 27701 defines the requirements for the implementation of a Privacy Information Management System (PIMS), through a step-by-step implementation process.
• ISO/IEC 27701 allows certification and international recognition of an organization, and supports the compliance with GDPR and other related privacy requirements; access to new markets and optimization of operations; and improves quality, increases productivity, competitive advantage, customer satisfaction and sales revenues.
• Data Protection 27701 Lead Implementer course bases its pedagogical model in a certification program based on the ISO/IEC 17024 standard, which defines the requirements for certification of people, fulfilling the recommendations of ISO.
• Throughout the Data Protection 27701 Lead Implementer course, in addition to the basic concepts of PIMS, are presented the detailed steps needed to plan, establish, implement, maintain, and continually improve a Privacy Information Management System (PIMS, or DPMS), in accordance with the requirements of the ISO/IEC 27701 and ISO/IEC 27001 standards and in compliance with GDPR and related EDPB guidance.
• Certification exam is monitored by an official Behaviour administrator.
• The Certified Data Protection 27701 Lead Implementer certification exam is conducted at the end of the course, on the last day of training, which focuses on multiple-choice and open questions based in a main case study allowing the certifying entity to measure, more effectively, the knowledge of the candidates.
• Upon success in the exam, the professional will achieve one of the Data Protection 27701 certifications levels. If the professional fails the exam, he is entitled to one free retake within a 2-month period from the released date of the exam.
• Behaviour Pedagogical Model aims to provide a learning environment conducive to acquisition of competences, in accordance with objectives of each training program. Promoting interaction, participation, and appreciation of experiences, we contribute to meaningful learning, certification, and international recognition but, above all to the development of critical thinking and autonomy.
• Behaviour is an organization accredited by DGERT (Portuguese Government Entity). Behaviour has its Quality Management System (QMS) implemented in accordance with the requirements of ISO 9001, the requirements of DGERT, the requirements of the European standard NP 4512 and the standard ISO 10015.

Datas e Preço

Programa Datas Garantidas

(*) All dates of this course are guaranteed only for the events that take place in Lisbon. In other physical locations or in Live Online training, all events are subject to a minimum number of participants.

On Behaviour all classroom courses at Lisbon occur regardless of the number of trainees in room. The concept of setting up classes does not exist in our classroom educational model, which is why all classroom public dates, presented on the website, are guaranteed. So if you're in Portugal or anywhere else in the world, you can prepare your week and your trip, as long as you ensure your registration in the a classroom course.

Descontos de Volume

For companies, Behaviour offer discounts, starting from the registration of the 2nd participant, in the same course and on the same date.
Simulate the prices for the number of participants you want to register to training@behaviour-group.com or contact us via chat.

Hotéis e Informações Úteis

Know where you can stay in Lisbon. For more information please check online Booking.com