Privacy Information Management System: ISO/IEC 27701 Lead Auditor
Overview:
Introduction:
The ISO/IEC 27701 Lead Auditor training course helps you to acquire the expertise required to conduct a Privacy Information Management System (PIMS) audit by utilizing generally accepted audit principles, methods, and methodologies.
Course Objectives:
At the end of this course the participants will be able to:
- Understand a Privacy Information Management System (PIMS) and its processes based on ISO/IEC 27701
- Identify the relationship between ISO/IEC 27701, ISO/IEC 27001, ISO/IEC 27002, and other standards and regulatory frameworks
- Acquire the skills necessary to perform the planning, oversight, and reporting duties of an ISO 19011-compliant management system audit.
- Discover how to understand ISO/IEC 27701 requirements in the context of a PIMS audit.
Targeted Audience:
- Aspiring Privacy Information Management System (PIMS) certification auditors
- PIMS audit process mastery by managers or consultants
- people are charge of ensuring compliance with PIMS requirements
- Technical professionals attempting to be ready for a PIMS audit
- professionals who specialize in protecting personally identifiable information (PII)
Course Outline:
Unit1: Introduction to Privacy Information Management System (PIMS) and ISO/IEC 27701
- training program goals and elements
- Standards and governing structures
- accreditation procedure
- fundamental privacy and information security
- principles and concepts
- system for managing privacy information (PIMS)
Unit2: Audit concepts, planning, and audit launch
- Basic auditing ideas and principles
- The effect of technology and trends in auditing
- data-driven auditing
- Auditing based on risk
- beginning of the auditing procedure
- 1st stage audit
Unit3:On-site audit activities
-
Getting ready for the stage 2 audit (on-site audit)
- 2nd stage audit
- During the audit, communication
- auditing techniques
- planning audit test procedures
Unit4: Closing the audit
- writing reports on audit findings and nonconformities
- Audit records and quality assurance
- completing the audit
- Auditor evaluation of action plans
- the initial audit and beyond
- directing a program for internal audits
- completion of the training program