ISO 27701

ISO 27701 is an international standard, officially titled ISO/IEC 27701:2019 "Information security management system - Privacy information management system - Requirements and guidelines". It is an expanded version of the ISO 27001 information security management system standard, providing more specific requirements and guidelines for the protection of personal data

The purpose of ISO 27701 is to help organizations establish, implement, and maintain an effective personal data protection management system. This standard provides a framework to guide organizations on how to ensure consistency between information security and privacy protection when handling personal data

ISO 27701 contains a set of requirements and guidelines to help organizations comply with relevant privacy regulations and legal requirements in the processing of personal data, ensuring the legality, accuracy, and reliability of personal data. It emphasizes that organizations should implement appropriate technical and organizational measures to protect the confidentiality, integrity, and availability of personal data

ISO 27701 verification is based on an organization's implementation and compliance with the ISO 27001 information security management system, while also extending to the practice of personal data protection requirements. Through ISO 27701 verification, an organization can demonstrate its commitment and capability to personal data protection and demonstrate its compliance to relevant stakeholders

In summary, ISO 27701 is an expanded standard for information security management systems, focusing on the protection of personal data. It provides guidance and requirements to help organizations ensure compliance with relevant privacy regulations and legal requirements when processing personal data. This helps organizations establish a reliable personal data protection system to safeguard the privacy and security of personal data

1. Participants will gain an in-depth understanding of the ISO 27701 standard and the fundamental concepts of a Personal Data Protection and Privacy Management System (PIMS). They will learn how to build, implement, and maintain an effective PIMS to protect the privacy and security of personal data
2. Trainees will be able to apply the requirements of the ISO 27701 standard to their organization's personal data protection and privacy management system. They will learn to conduct personal data risk assessments, develop privacy protection measures, and establish corresponding policies and procedures
3. Trainees will be able to plan and conduct internal audits of their Personal Data Protection and Privacy Management System (PIMS) in accordance with the ISO 19011 standard. They will learn audit procedures, techniques, and tools, and be able to assess whether an organization's PIMS complies with the requirements of the ISO 27701 standard
4. They will understand the regulatory requirements for personal data and privacy protection, and be able to develop appropriate measures to protect the confidentiality, integrity, and availability of personal data

        Upon completion of the ISO 27701 course, participants will acquire the skills to establish and maintain a Personal Data Protection and Privacy Management System (PIMS) and to implement the ISO 27701 standard. They will be able to apply this knowledge and skills to build and maintain an effective PIMS and conduct internal audits to ensure compliance with ISO 27701 requirements. Participants will also gain the ability to manage personal data protection and privacy to ensure that organizations adhere to relevant regulations and best practices in handling personal data, protecting the privacy and security of that data