ISO 27701 Practitioner
The International Standards Organization (ISO) has issued the world's first standard to help organizations meet the requirements of the EU GDPR Regulation while declaring advanced personal data protection through auditing. Extends the requirements of ISO 27001 and ISO 27002.
Virtual Training or e-Learning?
We offer flexibility. You can choose from our selection of in-class courses as well as online courses.
Try a live virtual courseTarget Audience
The standard is intended for all those who want to maximize the possibilities for processing personal data and at the same time comply with the EU GDPR regulation and the law on personal data protection.
It is based on the requirements, principles, procedures and rules for information security management ISO 27001. This standard is supplemented, i.e., it is an extension of privacy requirements.
And it is the organizations that implement the ISO 27001 standard that will use the new ISO 27701 standard as a manual to extend security measures to the processing of personal data in order to comply with the GDPR Regulation and the Personal Data Protection Act.
- Administrators, Processors and Privacy Officers
- Managers and consultants interested in personal data protection
- Professional consultants who try to solve the requirements of GDPR procedurally and technically
Aims of the course
- Clearly defines roles and responsibilities
- Ensures transparency between stakeholders
- ISO 27701 builds confidence in GDPR compliance
- Facilitates the work of the Data Protection Commissioner
- Helps standardize processes for Administrators and Processors
- Reduces the complexity of ISO / IEC 27001 interconnection and information security
ISO 27701
ISO 27701 is a new certification standard for personal data protection
The new ISO 27701 standard, the co-author of which is the director of certification policies from Microsoft (Alex Li) will effectively align your privacy law with the requirements of the GDPR into specific policies, procedures, procedures, technical and operational activities. It contains a number of practical instructions for administrators, processors and data protection officers.
.png "ISO 27005 benefits")
GDPR Compliance
You can declare compliance with GDPR. This is a completely new certification standard in the field of personal data protection.
ISO 27701 is designed to be universally applicable in order to strengthen and standardize the protection of personal data.
It can be used in any industry, environment, regardless of the size of the organization. Like ISO 27001, it promotes a risk-based approach. With its help, each organization will solve its specific risks that it faces, which relate not only to information assets, but also to personal data.
Personal data protection
ISO 27701 defines the requirements and provides recommendations for the protection of personal data in the form of an extension of the ISO 27001 standard. Over 60,000 organizations have obtained this certification.
We recommend integrating ISO 27701 wherever there are requirements for the protection of personal data or information in general. The standard describes in practical form what is necessary for the creation, implementation, maintenance and continuous improvement of a personal data management system (PIMS).
GDPR vs. ISO 27701
GDPR and certification of conformity with personal data protection
EU GDPR (General Data Protection Regulation) requires controllers and processors to implement appropriate technical and organizational measures to ensure the privacy of such personal data.
However, the regulation itself provides only general guidance on how to implement these measures.
The International Organization for Standardization has therefore developed a new safety standard in the category of ISO 27000 standards. These are ISO / IEC 27701 Security Techniques.
The new standard for personal data protection is an extension of ISO / IEC 27001 and ISO / IEC 27002 Requirements and guidelines. Both standards deal with the protection of personal information.
Benefits
Demonstrate GDPR compliance with the help of ISO 27701 and ISO 27001
The implementation of ISO 27701 and ISO 27001 will help you to meet the legislative requirements for the protection of personal data as required by the European GDPR Regulation and related directives, including the right of data subjects (liability principle) under Article 5 (2) of the GDPR.
With an internationally recognized certificate, you will declare that you have technical, procedural, organizational and personnel measures in place in the area of personal data that you process.
Article 42 of the GDPR describes the certification mechanism, including seals and marks, so far only in general. Obtaining an accredited certification according to ISO 27001 with the extension of ISO 27701 is thus the only possible achievement of an internationally recognized certification that meets the requirements of regulatory and supervisory bodies in the field of personal data processing.
Agenda
Day 1Hide agendaOpen agenda
09:00 – 10:30
ISO 27001 Introduction
- Principles
- Processes
ISO 27001 Introduction
- GDPR
- Personal data protection
10:30 – 10:45
Coffee Break
10:45 – 12:15
ISO 27000 vs.
- ISO 27001 and GDPR
- ISO 27002 and GDPR
- ISO 27701 and GDPR
12:15 – 13:15
Lunch
13:15 – 14:45
ISO 27702
Upgrade for personal data
- physical security
- personal security
14:45 – 15:00
Coffee Break
15:00 – 17:00
ISO 27702
Upgrade for personal data
- IT security
- organisational security
Day 2Hide agendaOpen agenda
09:00 – 10:30
ISO 27002
- Upgrade for personal data managers
- Upgrade for personal data processors
10:30 – 10:45
Coffee break
10:45 – 12:15
GDPR and ISO
- ISO 27701 and Regulation 679/2016
- Auditor work according to ISO 27701
12:15 – 13:15
Lunch
13:15 – 14:45
Practical examples
- Risk analysis
- Suitable security measures recommendation
14:45 – 15:00
Coffee Break
15:00 – 17:00
ISO 27701 Certification
ISO 27701 is a new certification standard in the field of personal data protection.
Thanks to the new ISO 27701 standard, you can declare compliance with GDPR.
- Block duration 90 minutes
- Hours 16 hours
- Refreshments Yes
- Exam Practical
Prerequisites
ISO 27000 Foundation or higher
Jan Cuřín
A graduate of the Faculty of Electrical Engineering, Czech Technical University in Prague. Since 2005 he has worked as a lead auditor for accredited certification bodies for ISO/IEC 27001, ISO/IEC 20000-1, ISO 9001 and ISO 50001, with dozens of certification and surveillance audits in public administration, healthcare, telecommunications, energy and banking, including audits abroad. As a consultant he has prepared a number of companies for ISO/IEC 27001 certification, he has audited bank identity services under the eIDAS regulation and since 1989 he has been a court-appointed expert witness in computing and economics. At TAYLLORCOX he teaches ISO 27001, the Czech Cyber Security Act and GDPR, and he also trains the auditors of certification bodies: so in his course you hear exactly what a certification audit will ask.
What is his course like?
No reading the standard aloud. He presents every ISO/IEC 27001 requirement the way an auditor verifies it: what evidence the auditor wants to see, where companies most often fail and what is a minor finding that can be fixed within a week. Participants leave prepared not only for the exam, but with a realistic picture of how to pass a certification audit and how to lead one themselves.
- Lead Auditor ISMS ISO/IEC 27001, ITSM ISO/IEC 20000-1 and ISO 9001 for accredited certification bodies
- Certified Cyber Security Manager, Auditor and Architect under the Czech Cyber Security Act; Approved Trainer & Lead Auditor GDPR
- Risk Manager ISO/IEC 27005, court-appointed expert witness in computing and economics
Vladimír Ráb
For twenty years he worked where IT really breaks: he administered thousands of servers, designed networks for T-Mobile, built branch infrastructure from Ukraine to India and managed the migration of 60,000 computers for Société Générale. DHL contracted him into its security teams three times. He therefore knows ISO/IEC 27001 from both sides: as the infrastructure administrator whose door the audit knocks on, and as a certified Cyber Security Manager, Auditor and Architect under the Czech Cyber Security Act.
What is his course like?
He does not read the standard to you, he shows it in operation. He turns every Annex A control into a concrete setting: what access control that satisfies an auditor looks like, what logging you can actually investigate an incident from involves, and how to spot a backup nobody has ever restored. As a Certified Ethical Hacker and a Certified EC-Council Instructor he adds the attacker's view: why a given control is in the standard at all and what happens when it is missing.
On top of that, three things an online course cannot offer: teaching in Czech, groups of 7 to 12 people and dialogue. You can ask about situations from your own company and get an answer from someone who has most likely dealt with a similar one. He trains both technicians and company management, mainly in banking and telecommunications: he can present the same topic to server administrators and to the board's security committee alike.
Numbers instead of adjectives
- Thousands of trained graduates
- 5/5 average participant rating
- Since 2015 a TAYLLORCOX trainer
- 20 years of experience in IT operations and cyber security
- 98 %+ certification exam pass rate of his graduates
- 10 to 15 training days a month: teaching is not a side job but a craft
- Certified Cyber Security Manager, Auditor and Architect under the Czech Cyber Security Act, Accredited Trainer ISMS ISO/IEC 27001
- Certified Ethical Hacker (CEH), Certified EC-Council Instructor (CEI), Certified Network Defender (CND), EC-Council Incident Handler (ECIH), CCISO; CompTIA certifications across the portfolio he teaches
- Microsoft (MCSE, MCSA) and Cisco (CCNP Security); TAYLLORCOX trainer since 2015 with a certification exam pass rate of over 98 %
Petra Dytrychová
A graduate of the Czech Technical University in Prague. For more than six years she managed the management systems at České Radiokomunikace, where, as the company's only Lead Auditor, she led internal ISMS audits under ISO/IEC 27001, ISO/IEC 20000-1 and the Czech Cyber Security Act in an environment of electronic communications, digital infrastructure and cloud services with high demands on availability and regulatory compliance. In 2024 she single-handedly guided Cloud4Com to a successful ISO/IEC 27001 certification. At TAYLLORCOX she trains and audits ISO 27001, NIS2 and the new Czech Cyber Security Act: not only what the standard says, but how to implement it so that it stands up to the certification audit and to everyday operations.
- Lead Auditor ISMS ISO/IEC 27001, ISO/IEC 20000-1 and the Czech Cyber Security Act
- Certified Cyber Security Manager and Cyber Security Auditor under NIS2, Act No. 264/2025 Coll. and Decree No. 409/2025 Coll.
- Lead Auditor ISO/IEC 42001 (AI Management System)
Graduate ratings
What makes our references exceptional? They are not one-off events. Clients come back to us regularly.
View the full list of reference clients.
Recently viewed
.svg)
Not sure if this is the right courese for you? Get in touch!
For assistance please give us a call.
We are available at +420 222 553 101 Always Monday to Friday: 9am - 5pm.
Cannot call? Send us a message.
Would you like a gift for your birtday?
