ISO/IEC 27701 Lead Auditor training course is designed to support the development of skills needed to audit a privacy information management system (PIMS) based on ISO/IEC 27701:2025 by applying widely recognized audit principles, procedures, and techniques.
Why You Should Attend
During this training course, participants will learn to plan and carry out audits in compliance with ISO 19011. Additionally, participants will acquire knowledge on audit techniques and become competent to manage an audit program. Most importantly, this training course provides guidance on auditing the clauses of ISO/IEC 27701:2025, as well as the privacy controls for PII controllers and PII processors.
It explains how to evaluate their implementation and effectiveness, as well as how to assess the organization’s ability to maintain, monitor, and continually improve its PIMS. After completing this training course, you can sit for the exam and, if you successfully pass the exam, you can apply for the “PECB Certified ISO/IEC 27701 Lead Auditor” credential. The internationally recognized PECB Lead Auditor certificate proves that you have the capabilities and competences to audit organizations based on best practices.
Who Should Attend?
This training course is intended for auditors seeking to perform and lead PIMS certification audits; managers or consultants seeking to master a PIMS audit process; individuals responsible for maintaining conformance with PIMS requirements; technical experts seeking to prepare for a PIMS audit; and expert advisors in the protection of PII.
Learning Objectives
By the end of this training course, participants will be able to explain the fundamental concepts and principles of a privacy information management system (PIMS) based on ISO/IEC 27701; interpret the ISO/IEC 27701 requirements for a PIMS from the perspective of an auditor; evaluate the PIMS conformity to ISO/IEC 27701 requirements, in accordance with the fundamental audit concepts and principles; plan, conduct, and close an ISO/IEC 27701 compliance audit, in accordance with ISO/IEC 17021-1 requirements, ISO 19011 guidelines, and other best practices of auditing; and manage an ISO/IEC 27701 audit program.
Educational Approach
This training course is based on both theory and best practices used in PIMS audits. Participants are strongly encouraged to interact with one another, exchange ideas, and actively participate in discussions. The quiz structure within the course closely mirrors that of the certification exam, ensuring participants are well-prepared for the exam. PECB offers various training course delivery formats, from traditional classroom settings to modern, technology-driven solutions. To learn more about these formats, please click here.
Prerequisites
A fundamental understanding of information security and privacy and a comprehensive knowledge of audit principles are required to attend this training course.
The course covers five days of content, with the certification exam on the fifth day, and carries 31 CPD credits. In the e-learning format you cover the same material at your own pace.
Yes. The course fee includes the PECB certification and examination fees. If you do not pass, one complimentary retake is available within 12 months of your first attempt.
A fundamental understanding of information security and privacy and a comprehensive knowledge of audit principles are required to attend this training course.
It is available as e-learning (English) and hybrid learning (English). Choose the format and language before adding the course to your cart.
Hybrid learning combines the self-paced course with one day of one-to-one live coaching with the instructor. The day can be split into a half day before you start studying and a half day before your exam, so you go in prepared.
There is no scheduled live class for this course at the moment. The hybrid option adds one day of one-to-one live coaching with the instructor. Organizations that want a dedicated live session can contact us at [email protected].
PECB issues the certificate. After passing the exam you can apply for the “PECB ISO/IEC 27701 Lead Auditor” credential. Horus Academy is a PECB Authorized Silver Partner and does not issue the certificate itself.
The “PECB ISO/IEC 27701 Lead Auditor” exam fully meets the PECB Examination and Certification Program (ECP) requirements. It covers the following competency domains:
Domain 1: Fundamental principles and concepts of a privacy information management system
Domain 2: Privacy information management system requirements
Domain 3: Fundamental audit concepts and principles
Domain 4: Preparing an ISO/IEC 27701 audit
Domain 5: Conducting an ISO/IEC 27701 audit
Domain 6: Closing an ISO/IEC 27701 audit
Domain 7: Managing an ISO/IEC 27701 audit program
After passing the exam, you can apply for one of the credentials in the table below. You will receive a certificate once you fulfill all the requirements of the selected credential.
The certification requirements for ISO/IEC 27701 Lead Auditor are:
| Professional credential | Exam | Professional experience | PIMS audit/assesment experience | Other requirements |
|---|---|---|---|---|
| ISO/IEC 27701 Provisional Auditor | ISO/IEC 27701 Lead Auditor | None | None | Signing the PECB Code of Ethics
|
| ISO/IEC 27701 Auditor | 2 years (1 in privacy management) | 200 hours | ||
| ISO/IEC 27701 Lead Auditor | 5 years (2 in privacy management) |
300 hours | ||
| ISO/IEC 27701 Senior Lead Auditor | 10 years (7 years in privacy management) |
1000 hours |
The audit activities should follow best practices and include the following:
Course agenda
Day 1:Introduction to the privacy information management system (PIMS) and ISO/IEC 27701
Day 2:Audit principles and the preparation for and initiation of an audit
Day 3: On-site audit activities
Day 4: Closing the audit
Day 5: Certification exam
