Sessions
Date, delivery mode, trainer and fee are specific to each session. Fees are per person.
Request a quote for a date for your organisation or for the next run.
Application formNo membership required
Get a quote
Training content
Overview
ISO/IEC 27701 Privacy Information Management System Awareness Training has been designed to provide a basic understanding of the ISO/IEC 27701:2025 requirements, ensure the secure and responsible management of personal data and personally identifiable information (PII), and raise awareness of privacy management among employees within organisations.
ISO/IEC 27701:2025 provides requirements and guidance for establishing, implementing, maintaining and continually improving a Privacy Information Management System (PIMS). The current version can be implemented as a standalone management system standard and integrated with ISO/IEC 27001.
The language of the training is Turkish. The training is delivered online.
About the Training
The training covers the purpose and structure of the ISO/IEC 27701:2025 standard, the Privacy Information Management System (PIMS), personally identifiable information (PII), the roles of data controllers and data processors, privacy risks, the personal data lifecycle, data subject rights, technical and organisational controls, privacy incidents, third-party management and employees’ privacy responsibilities.
Who Should Attend?
- Employees and managers within organisations
- Information security and privacy personnel
- Employees involved in KVKK/GDPR processes
- Information technology personnel
- Risk and compliance teams
- Human resources and legal personnel
- PIMS team members
- Internal auditors
- Personnel of data controller and data processor organisations
- Professionals seeking to gain a basic understanding of ISO/IEC 27701
Objectives and Outcomes
The aim is for participants to understand the fundamental approach of the ISO/IEC 27701:2025 standard, become aware of the privacy risks arising from the processing of personal data, and understand their responsibilities for managing PII securely and in compliance with legislation within their own areas of responsibility.
By the End of the Training
Participants will be able to:
- Explain the purpose and scope of the ISO/IEC 27701:2025 standard.
- Define the fundamental concepts of PIMS and PII.
- Distinguish between the roles of data controller and data processor.
- Identify the main sources of privacy risks.
- Explain the PII life cycle.
- Understand the importance of data subject rights.
- Recognise technical and organisational privacy controls.
- Understand their responsibilities for reporting and managing privacy breaches.
- Identify privacy risks arising from third parties.
- Apply appropriate practices for protecting personal data in daily business processes.
Programme and Method
Training Topics
- Overview of the ISO/IEC 27701:2025 Standard and PIMS Structure
- PII, Privacy and Fundamental Data Protection Concepts
- Responsibilities of Data Controllers, Data Processors and Interested Parties
- Identification and Management of Privacy Risks
- PII Life Cycle: Collection, Use, Sharing, Retention and Disposal
- Data Subject Rights and Privacy Notices
- Technical and Organisational Privacy Controls
- Third Parties, Suppliers and PII Transfers
- Privacy Incidents, Breaches and Notification Processes
- Employee Awareness, Secure Data Use and Continual Improvement
Training Method
The training is delivered through subject instruction, an overview of the ISO/IEC 27701 requirements, personal data processing scenarios, examples of privacy risks, data breach cases and awareness activities relating to the day-to-day working environment.
Attendance and Certificate
Certificate Rules
A certificate of attendance is issued to all participants whose attendance has been confirmed. To receive a certificate of achievement, participants must achieve a passing grade in the examination at the end of the training; participants who use all their examination attempts but do not pass will be issued a certificate of attendance.
FAQ and Resources
Who is the ISO/IEC 27701 Privacy Information Management System Awareness Training suitable for?
It is intended for all employees of organisations who process, store or share personal data or manage these processes, as well as professionals working in information security, privacy, risk, compliance and management systems.
What is the main objective of the training?
To ensure that participants understand their fundamental responsibilities regarding the protection of personal data, privacy risks and the PIMS approach established under ISO/IEC 27701.
Which organisations can ISO/IEC 27701 be applied to?
It can be applied to all public-sector, private-sector and not-for-profit organisations that collect, process, store or control personally identifiable information. ISO/IEC 27701:2025 can be implemented independently or integrated with ISO/IEC 27001.
Is ISO/IEC 27701:2019 still valid?
No. ISO/IEC 27701:2019 has been withdrawn, and the current version is ISO/IEC 27701:2025.
Does the training include practical exercises?
Yes. The training uses examples and case studies on personal data processing, data sharing, privacy risks, third-party management and data breaches.
Is there an examination at the end of the training?
Yes. An assessment examination is administered at the end of the training.
References
- ISO/IEC 27701:2025 Information Security, Cybersecurity and Privacy Protection — Privacy Information Management Systems — Requirements and Guidance
- ISO/IEC 27001 Information Security Management Systems
- ISO/IEC 27002 Information Security Controls
- ISO/IEC 29100 Privacy Framework
- ISO/IEC 27706 Requirements for Bodies Providing Audit and Certification of Privacy Information Management Systems
- KVKK, GDPR and relevant data protection legislation
Similar trainings
EXEMPLAR002ISO/IEC 27701 Privacy Information Management System Transition Training8 hours · No session plannedEXEMPLAR017ISO/IEC 27019 Information Security, Cybersecurity and Privacy Protection Awareness Training8 hours · No session plannedEXEMPLAR018ISO/IEC 27019 Information Security, Cybersecurity and Privacy Protection Internal Auditor Training16 hours · No session planned