ISO/IEC 27701 Lead Implementer is a professional training course that provides participants with the knowledge and skills needed to implement, manage and continually improve a Privacy Information Management System (PIMS) based on the ISO/IEC 27701 standard. This standard extends ISO/IEC 27001 and provides best practices for managing privacy controls and compliance in modern organisations.
The course focuses on understanding how to interpret and apply the requirements of ISO/IEC 27701 to support privacy management and data protection objectives. Participants learn how to define the context of a PIMS, plan its implementation, integrate privacy controls with existing systems such as ISO/IEC 27001, and establish practices that sustain compliance, risk management and privacy governance. Real-world examples, case discussions and hands-on scenarios are used to strengthen practical application and readiness for the certification exam.
Course objectivesUpon completion of this course, participants will be able to:
PrerequisitesParticipants should have a basic understanding of information security and privacy management concepts. Prior exposure to ISO/IEC 27001 either through training or experience is beneficial but not mandatory.
Target audienceThis course is suitable for privacy practitioners, data protection officers (DPOs), compliance professionals, IT and security professionals, consultants and anyone involved in planning, implementing or maintaining privacy management systems.
Participants are introduced to the purpose, scope and structure of ISO/IEC 27701, including how it extends and relates to ISO/IEC 27001. Key concepts in privacy information management and the role of PIMS in organisational governance are explained.
This part of the course focuses on understanding organisational context, defining roles and responsibilities, and planning the implementation of a PIMS. Participants learn how leadership and strategic planning support effective privacy governance.
Participants explore how to implement privacy controls and integrate them with existing information security and governance systems. Topics include documentation, communication, competence, operational control and risk treatment.
This section covers how to monitor privacy performance, conduct internal evaluations, manage nonconformities and support continual improvement of privacy practices. Participants examine mechanisms for measurement, review and compliance monitoring.
The final segment facilitates preparation for the ISO/IEC 27701 Lead Implementer exam, including review of key areas, exam structure and success strategies.
After successfully completing the exam, you can apply for the credentials shown on the table below. You will receive a certificate once you comply with all the requirements related to the selected credential.
For more information about ISO/IEC 27701 certifications and the PECB certification process, please refer to the Certification Rules and Policies.
To be considered valid, the implementation activities should follow the best implementation practices and include activities such as:
For more information about the PECB certification process, please refer to the Certification Rules and Policies.
The exam is will take place at the end of the course on onsite classroom courses
For Virtual courses we will send out a voucher that gives you access to an online exam. This can be booked and taken home monitored by a proctor via camera. More information about the exam rules will be send from PECB.
Test details:
As the exam is an Essay Typ exam, candidates are authorized to use:
Examination rules and policies
Results will be communicated by email in a period of 6 to 8 weeks, after taking the exam. The results will not include the exact grade of the candidate, only a mention of pass or fail.
Candidates who successfully complete the examination will be able to apply for a certified scheme which is explained in the course description.
In the case of a failure, the results will be accompanied with the list of domains in which the candidate had failed to provide guidance for exams’ retake preparation.
Candidates, who disagree with the exam results, may file a complaint by writing to examination@pecb.com or through PECB ticketing system.
There is no limit on the number of times a candidate may retake an exam. However, there are some limitations in terms of allowed time-frame in between exam retakes, such as:
After the fourth attempt, a waiting period of 12 months from the last session date is required, in order for candidate to sit again for the same exam. Regular fee applies.
For the candidates that fail the exam in the 2nd retake, PECB recommends to attend an official training in order to be better prepared for the exam.
To arrange exam retakes (date, time, place, costs), the candidate needs to contact Glasspaper.
Duration: 5 days
Price: 27 900
Language: English
Format: Open course and corporate training
Hva lærer jeg på dette kurset?
Du lærer hvordan du planlegger, implementerer, drifter og forbedrer et Privacy Information Management System (PIMS) i tråd med ISO/IEC 27701, inkludert risiko- og kontrollarbeid for personvern.
Hva kreves for å delta?
Det anbefales å ha grunnleggende forståelse av informasjonssikkerhet og personvern, gjerne basert på ISO/IEC 27001-kunnskap, men det er ikke et absolutt krav.
Hvordan gjennomføres eksamen?
Eksamen tas enten fysisk ved kursstedet eller online med voucher og online eksamensvakt.
Hva skjer hvis jeg ikke består første eksamen?
Du får som regel ett nytt eksamensforsøk som tas online.
Får jeg ekstra tid på eksamen?
Ja, du får ekstra tid dersom engelsk ikke er ditt morsmål, i tråd med sertifiseringsregler.
Hvilken sertifisering får jeg?
Etter godkjent eksamen oppnår du PECB Certified ISO/IEC 27701 Provisional Implementer sertifiseringen. For å få full sertifisering kan det også stilles krav til dokumentert arbeidserfaring innen informasjonssikkerhet og ISMS-arbeid. Sjekk tabellen under sertifisering for mer informasjon.
Får jeg ISO-standarden?
Nei, men du får tilgang til materialer og rammeverksreferanser som brukes under kurset og eksamen.
Hva er forskjellen på Foundation, Implementer og Auditor?
Foundation gir deg grunnleggende forståelse av standardens struktur og krav. Implementer handler om å etablere, lede og drifte systemet. Auditor er rettet mot å evaluere og revidere systemet i praksis.
Hvor skal jeg starte?
Hvis du er helt ny til ISO/IEC 27701 anbefales det å starte med Foundation-kurs før du går videre til Lead Implementer.
Er dette kurset relevant for ledere?
Ja, kurset er relevant for ledere, DPOer, compliance-ansvarlige og konsulenter som jobber med personvern og systematisert styring av personvernrisiko.
Kan jeg ta dette kurset som e-læring eller selvstudium?
Nei, det er ikke mulig å ta dette kurset som e-læring, men mulig med selvstudie. Send en mail til prosjekt@glassper.no for mer informasjon og bestilling.
