Lead Implementer
ISO 27701 Lead Implementer
2026 edition
Self-paced PECB training delivered via myPECB.
Global training partner Aegentra is an official PECB authorised training partner and an official CompTIA partner.
Implement a Privacy Information Management System (PIMS) to ISO/IEC 27701:2025 — standalone, or integrated with an existing information security management system. Covers PII flows, lawful basis, privacy risk treatment, and the PIMS-specific Annex A controls. Concludes with the official PECB certifying exam.
- Typical study effort
- 30–40 hours
- CPD credits
- 31
- Course languages
- English
Who it is for
- DPOs implementing privacy management systems
- Security leaders adding privacy scope to an existing security programme
What you will learn
- Plan, scope, and stand up an ISO/IEC 27701:2025 PIMS — standalone or integrated with an existing ISMS.
- Conduct a privacy risk assessment and data protection impact assessment (DPIA).
- Implement the applicable Annex A controls for controllers and processors, using Annex B guidance.
- Build defensible records of processing activities (RoPA) and DPIA registers.
- Prepare the organisation for ISO 27701 certification.
Course content
Module 1 — Foundations and the PIMS roadmap
- PECB implementation methodology applied to privacy
- PIMS vs. ISMS scope
- Stakeholder mapping for privacy
- Building the project plan
Module 2 — Context, scope, and PIMS policy
- PII inventory and data mapping
- Determining controller vs. processor role
- Drafting the PIMS scope statement
- Privacy policy and objectives
Module 3 — Privacy risk and DPIA
- Privacy-specific threats and harms
- DPIA methodology aligned with GDPR / APP
- Risk treatment plans
- Statement of Applicability for PIMS
Module 4 — Implementing the Annex A controls
- Controller controls (Annex A Table A.1)
- Processor controls (Annex A Table A.2)
- Lawful basis, consent, transparency
- Cross-border transfers
Module 5 — Operation and performance evaluation
- Records of processing (RoPA)
- Privacy training and awareness
- Internal audit for PIMS
- Management review with privacy KPIs
Module 6 — Certification and continuous improvement
- Standalone PIMS certification, or combined with an ISMS
- Stage 1 and Stage 2 audits
- Surveillance and recertification
- Continuous improvement on privacy
Prerequisites
- PECB requires foundational knowledge of information privacy before attending.
- ISO 27701 Foundation or equivalent study can help build that knowledge; it is a recommendation, not a required prior certificate.
The exam
- Format
- Open-book, multiple-choice — stand-alone and scenario-based questions
- Duration
- 3 hours
- Questions
- 80 multiple-choice questions across 7 competency domains — fundamental principles and concepts of a PIMS, initiation of the PIMS implementation, planning a PIMS implementation, implementation of a PIMS, monitoring and measurement, continual improvement, and preparing for a PIMS certification audit
- Pass mark
- 70%
What is included
Course materials
- PECB ISO/IEC 27701 Lead Implementer slide deck (digital)
- 12 months access via myPECB
- Module quizzes, practice scenarios, and exam-style cases
- Editable PIMS templates — privacy policy, ROPA, DSR procedure
Exam package
- Official PECB Lead Implementer exam voucher
- Three-hour open-book exam, remotely proctored
- Two exam attempts (initial + one free resit)
- PECB Implementer / Lead Implementer credential on pass