Foundation
ISO 27701 Foundation
2026 edition
Self-paced PECB training delivered via myPECB.
Global training partner Aegentra is an official PECB authorised training partner and an official CompTIA partner.
Foundation-level understanding of ISO/IEC 27701, the privacy information management standard — standalone since the 2025 revision.
- Typical study effort
- 8–12 hours
- CPD credits
- 14
- Course languages
- English
Who it is for
- Privacy officers, DPOs, and privacy generalists
- ISMS practitioners extending their scope to a PIMS
- Compliance teams needing a recognised privacy credential
What you will learn
- Explain what a Privacy Information Management System (PIMS) is, and how ISO/IEC 27701:2025 works standalone or alongside an ISO 27001 ISMS.
- Describe the controller / processor distinction and where each set of controls applies.
- Recognise the PIMS-specific Annex A controls — Table A.1 for PII controllers, Table A.2 for PII processors and Table A.3 shared security, with Annex B as the matching implementation guidance.
- Be ready to progress to Lead Implementer or Lead Auditor on PIMS.
Course content
Module 1 — Introduction to privacy management
- Privacy fundamentals and PII lifecycle
- Why ISO 27701 exists and how it relates to GDPR / APP
- Roles: controller, processor, data subject
- Privacy vs. security
Module 2 — Structure of ISO 27701
- Clauses 4-10 of the standalone 2025 edition
- Annex A: 31 controls for PII controllers
- Annex A Table A.2: 18 controls for PII processors
- The PIMS scope
Module 3 — Privacy controls in practice
- Lawful basis and consent
- Data subject rights and how to handle requests
- Privacy impact assessments
- Cross-border data transfer controls
Module 4 — Operating a PIMS
- PII inventory and data flow mapping
- Records and documented information
- Internal audit basics for privacy
- Management review with privacy KPIs
Module 5 — Exam preparation
- Foundation exam format and pacing
- Sample question walkthrough
- Booking and sitting the official PECB exam
Prerequisites
- None — Foundation is the entry-level pathway and assumes no prior privacy or ISO experience.
The exam
- Format
- Multiple-choice
- Duration
- 1 hour
- Questions
- 40 multiple-choice questions worth 100 points in total, across 2 competency domains — the fundamental principles and concepts of the standard, and the management system requirements themselves. Each question has one correct answer and two distractors
- Pass mark
- 70%
What is included
Course materials
- PECB ISO/IEC 27701 Foundation slide deck (digital)
- 12 months access via myPECB
- Module quizzes and practice questions
- PII Controller vs Processor quick-reference sheet
Exam package
- Official PECB Foundation exam voucher
- Two exam attempts (initial + one free resit)
- PECB digital certificate on pass