Learn practical knowledge and skills to implement, audit, and maintain a Privacy Information Management system (PIMS)

ISO/IEC 27701 was amended in 2025 in the most significant update to the global Privacy Information Management System (PIMS) standard since its original publication in 2019. These amendments reflect the rapidly evolving privacy landscape, incorporating lessons learned from years of real-world implementation, emerging regulatory developments, and the accelerating pace of digital transformation across industries worldwide. This course provides a structured, practical pathway through those changes — covering governance, risk, controls, emerging technologies, and third-party management — and equips learners with the competencies needed to conduct gap analyses against the updated standard, revise PIMS documentation, and prepare for certification audits.

Designed for privacy professionals, information security managers, compliance officers, Data Protection Officers (DPOs), and internal auditors, this course is relevant whether you are maintaining an existing PIMS certification or leading your organization's first compliance journey. Learners will explore the structural changes introduced in the 2025 amendment, revised controls for Personally Identifiable Information (PII) controllers and processors, updated guidance on emerging technologies, and strengthened requirements for third-party management. Conceptual explanations are grounded in real-world examples drawn from sectors including healthcare, finance, retail, and technology, illustrating how organizations of varying sizes and complexities have interpreted and applied specific provisions in practice.

By the end of this course, participants will have a thorough understanding of what has changed in ISO/IEC 27701:2025, why those changes matter, and how to translate updated requirements into meaningful action within their own organizations. This knowledge will position you to lead your organization's response with confidence — strengthening privacy governance, reducing compliance risk, and reinforcing the trust of the individuals whose data you are entrusted to protect.