Contact Us
Logo blue GRSee
Contact Us

GRSee Training

PECB Certified ISO/IEC 27701 Lead Auditor

Master the audit of a privacy information management system (PIMS) based on ISO/IEC 27701:2025

Register Here

Why should you attend?

During this training course, participants will learn to plan and carry out audits in compliance with ISO 19011, ISO/IEC 17021-1, and ISO/IEC 27706. Additionally, participants will acquire knowledge on audit techniques and become competent to manage an audit program.

Most importantly, this training course provides guidance on auditing the clauses of ISO/IEC 27701:2025, as well as the privacy controls for PII controllers and PII processors. It explains how to evaluate their implementation and effectiveness, as well as how to assess the organization’s ability to maintain, monitor, and continually improve its PIMS.

After completing this training course, you can sit for the exam and, if you successfully pass the exam, you can apply for the “PECB Certified ISO/IEC 27701 Lead Auditor” credential. The internationally recognized PECB Lead Auditor certificate proves that you have the capabilities and competencies to audit organizations based on best practices.

Who should attend

  • Auditors seeking to perform and lead PIMS certification audits
  • Managers or consultants seeking to master a PIMS audit process
  • Individuals responsible for maintaining conformance with PIMS requirements
  • Technical experts seeking to prepare for a PIMS audit
  • Expert advisors in the protection of PII
PECB Image Red

Learning objectives

  • Explain the fundamental concepts and principles of a privacy information management system (PIMS) based on ISO/IEC 27701
  • Interpret the ISO/IEC 27701 requirements for a PIMS from the perspective of an auditor
  • Evaluate the PIMS conformity to ISO/IEC 27701 requirements, in accordance with the fundamental audit concepts
    and principles
  • Plan, conduct, and close an ISO/IEC 27701 compliance audit, in accordance with ISO/IEC 17021-1 requirements, ISO 19011
    guidelines, and other best practices of auditing
  • Manage an ISO/IEC 27701 audit program

Examination

Duration 3 hours

The “PECB ISO/IEC 27701 Lead Auditor” exam fully meets the PECB Examination and Certification Program (ECP) requirements.It covers the following competency domains:

Domain 1  |   Fundamental principles and concepts of a privacy information management system

Domain 2 |   Privacy information management system requirements

Domain 3 |   Fundamental audit concepts and principles

Domain 4 |   Preparing an ISO/IEC 27701 audit

Domain 5 |   Conducting an ISO/IEC 27701 audit

Domain 6 |   Closing an ISO/IEC 27701 audit

Domain 7 |   Managing an ISO/IEC 27701 audit program

For specific information about the exam type, languages available, and other details, please visit the List of PECB Exams and Exam Rules and Policies.

Course agenda

Day 01

Introduction to the privacy information management system (PIMS) and ISO/IEC 27701

  • Training course objectives and structure
  • Introduction to ISO/IEC 27701 and the PIMS
  • Certification process
  • Fundamental concepts and principles related to information privacy
  • Overview of ISO/IEC 27701 requirements

Day 02

Audit principles and the preparation for and initiation of an audit

  • Fundamental audit concepts and principles
  • The impact of trends and technology in auditing
  • Evidence-based auditing
  • Risk-based auditing
  • Initiation of the audit process
  • Stage 1 audit

Day 03

On-site audit activities

  • Preparing for stage 2 audit
  • Stage 2 audit
  • Communication during the audit
  • Information collection and analysis methods
  • Creating audit test plans
  • Auditing the requirements of ISO/IEC 27701 –
    clauses 4 to 10

Day 04

Closing of the audit

  • Auditing the requirements of ISO/IEC 27701 – Annex A controls
  • Drafting audit findings and nonconformity reports
  • Audit documentation and quality review
  • Closing of the audit
  • Evaluation of actions plans by the auditor
  • Beyond the initial audit
  • Managing an internal audit program
  • Closing of the training course

Day 05

Certification exam

Certification requirements

After passing the exam, you can apply for one of the credentials in the table below. You will receive a certificate once you fulfill
all the requirements of the selected credential.

Credential
Exam
Professional Experience
PIMS audit/ assessment experience
Other requirements
ISO/IEC 27701 Provisional Auditor
ISO/IEC 27701 Lead Auditor
None
None
Signing the PECB Code of Ethics
ISO/IEC 27701 Auditor
ISO/IEC 27701 Lead Auditor
2 years (1 in privacy management
200 hours
Signing the PECB Code of Ethics
ISO/IEC 27701 Lead Auditor
ISO/IEC 27701 Lead Auditor
5 years (2 in privacy management
300 hours
Signing the PECB Code of Ethics
ISO/IEC 27701 Senior Lead Auditor
ISO/IEC 27701 Lead Auditor
10 years (7 years in privacy management)
1000 hours
Signing the PECB Code of Ethics

General Information

  • Certificate and examination fees are included in the price of the training course.
  • Participants will receive more than 400 pages of comprehensive training materials, including practical examples, exercises,and quizzes.
  • Participants who have attended the training course will receive an attestation of course completion worth 31 CPD (Continuing Professional Development) credits.
  • Candidates who have completed the training course with one of our partners and failed the first exam attempt are eligible to retake the exam for free within a 12-month period from the course completion date, because the fee paid for the training course
    includes a first exam attempt and one retake. Otherwise, retake fees apply.