ISO 27701

ISO 27701 is an international standard, its full name is ISO/IEC 27701:2019 "Information security management system - Privacy information management system - Requirements and guidelines". It is an expanded version based on the ISO 27001 information security management system standard and provides more specific requirements and guidelines for personal data protection.

The purpose of ISO 27701 is to help organizations establish, implement and maintain an effective personal data protection management system. The standard provides a framework to guide organizations on how to ensure consistent information security and privacy protection when processing personal data.

ISO 27701 contains a series of requirements and guidance to help organizations comply with relevant privacy regulations and legal requirements during the processing of personal data and ensure the legality, accuracy and reliability of personal data. It emphasizes that organizations should implement appropriate technical and organizational measures to protect the confidentiality, integrity and availability of personal data.

The verification of ISO 27701 is based on the information security management system that the organization has implemented and complies with ISO 27001, and also extends the practice of personal data protection requirements. Through verification to ISO 27701, an organization is able to demonstrate its commitment and capabilities to personal data protection and demonstrate its compliance to relevant stakeholders.

In summary, ISO 27701 is an expanded version of the information security management system standard focusing on personal data protection. It provides guidance and requirements to help organizations ensure that when processing personal data, they comply with relevant privacy regulations and legal requirements. This helps organizations establish a trustworthy personal data protection system to protect the privacy and security of personal data.

1. Participants will gain an in-depth understanding of the ISO 27701 standard and the basic concepts of personal data protection and privacy protection management systems. They will learn how to build, implement and maintain an effective PIMS to protect the privacy and security of personal data.
2. Participants will be able to apply the requirements in the ISO 27701 standard to their organization's personal data protection and privacy protection management systems. They will learn to conduct personal data risk assessments, formulate privacy protection measures, and establish corresponding policies and procedures.
3. Participants will be able to plan and execute internal audits of personal data protection and privacy protection management systems in accordance with the ISO 19011 standard. They will understand audit procedures, techniques and tools and be able to assess whether an organization's PIMS meets the requirements of the ISO 27701 standard.
4. They will understand the regulatory requirements for personal data and privacy protection and be able to put in place appropriate measures to protect the confidentiality, integrity and availability of personal data.

        After completing the ISO 27701 course, students will have the capabilities of personal data protection and privacy protection management systems and ISO 27701 standards. They are able to apply this knowledge and skills to establish and maintain an effective PIMS and can conduct internal audits to ensure compliance with the requirements of the ISO 27701 standard. Participants will also have the ability to protect personal data and privacy protection management to ensure that organizations comply with relevant regulations and best practices when processing personal data and protect the privacy and security of personal data.