Live Online Training

This course enables participants to develop the necessary expertise to support an organization in implementing and managing an Data Protection Management System (DPMS) as specified in REGULATION (EU) 2016/679 (GDPR).

Participants will gain a thorough understanding of best practices used to implement the DPMS (or PIMS) based on the General Data Protection Regulation (GDPR) and through organizational context and incorporation of interested parties. This training is consistent with the project management practices established in ISO 10006 (Quality Management Systems – Guidelines for Quality Management in Projects).

The training course presents an holistic implementation approach based on a DPMS (or, PIMS) methodology, supported by the requirements of GDPR and ISO/IEC 27701, the European Data Protection Board (EDPB) guidelines, related privacy and data protection best practices from ENISA and NIST, and other recognized standards, practices and frameworks, such as ISO/IEC 27001, ISO/IEC 27002, ISO/IEC 29100, BS 10012, among others.

This 5-day course prepares the participants for the Behaviour Data Protection Lead Implementer (DPLI) certification. This certification is aligned with ISO/IEC 17024 and therefore valid at international level.

Because it is a course with a very relevant practical impact, participants are invited to implement a Data Protection Management System, in the classroom, during training, based on a case study. This practice supports the necessary theoretical part of the training and establishes a clear link between theory, regulation and how to do it. In this way, participants are able to transfer the knowledge of training to the job and acquire a greater critical sense about the requirements and their applicability in the organization.

Metodologia

The DPLI training course is based on both theory and practice sessions with:

Lectures illustrated with examples based on real cases

Practical exercises based on a full case study including oral presentations

Review exercises that assist in preparation to the certification exam.

To benefit from the practical exercises, the number of training participants is limited.

Destinatários

Project managers, information security professionals, consultants, and designated DPO’s for public organizations or by private companies wanting to prepare and to support an organization in the implementation of a Data Protection Management Systems (DPMS) based on GDPR

Privacy and data protection consultants and/or auditors involved or supporting organizations on the compliance with EU data protection requirements

Auditors who wish to fully understand the GDPR implementation process using a Data Protection Management Systems (DPMS) approach

CxO and Senior Managers responsible for the governance of an enterprise and the management of its data protection risks

Members of information security and/or data protection teams

Expert advisors in privacy, data protection and information security

Technical experts wanting to prepare for a data protection or information security function or for a DSMS project management function.

Any professional wanting to acquire the necessary skills to implement an EU GDPR based Data Protection Management System (DPMS), supported by the requirements of ISO/IEC 27701 (PMIS)

Pré-Requisitos

Participants should understand English as the course documentation is in this language.

Objectivos Gerais

At the end of the course students should be able to:

identify and know how to apply the main privacy and data protection concepts and terminology

understand the main privacy and data protection frameworks, including the details of EU GDPR regulation, ISO/IEC 27701 and the foundations of related data protection frameworks

understand the roles and responsibilities of the several stakeholders, including the DPO, on the compliance of the GDPR and their involvement on the implementation and operation of a Data Protection Management System based on GDPR, supported by ISO/IEC 27701

acquire necessary expertise in understanding the business context of an organization when implementing the GDPR framework

know how to implement a Data Protection Management System to comply with the requirements of GDPR, supported by ISO/IEC 27701

understand the importance of other related interested parties (shareholders, authorities, clients, partners, etc.) and their role in the DPMS (or, PMIS)

gain a comprehensive understanding of the concepts, approaches, standards, methods and techniques required for the effective management of an Data Protection Management System based on GDPR, supported by ISO/IEC 27701

understand the relationship between the components integrated into organizational context, including risk management, related interconnections with data protection impact assessments (DPIA), controls, measures and compliance with the requirements of different stakeholders of the organization

develop knowledge and skills required to advise organizations on best practices in the management of privacy and data protection, including on the implementation of related information security measures

know how to draft and implement the needed data protection and information security measures and controls based on the latest international best practices, including ISO/IEC 27001, ISO/IEC 27002, ISO/IEC 27701, ISO/IEC 29100 family standards, and other recognized international recognized practices

know how to implement a personal data breach management process based on the requirements of GDPR, supported by ISO/IEC 27701 and the EDPB guidelines, and understand its integration with an information security incident management process based on ISO/IEC 27035

improve the capacity for analysis and decision making in the context of privacy and data protection management

acquire the needed expertise to support an organization on the preparation for a certification audit under the GDPR requirements, supported by ISO/IEC 27701

acquire the knowledge needed to succeed on the BEHAVIOUR DPLI exam and become a Certified Data Protection Lead Implementer (DPLI) professional

Programa

Day 1: Introduction to GDPR and privacy and data protection concepts and principles; Initiation of a DPMS

Day 2: Planning the implementation of a DPMS

Day 3: Implementing a DPMS

Day 4: Measuring and improvement a DPMS; Preparation for a GDPR compliant certification audit, supported by ISO/IEC 27701

Day 5: Data Protection 27701 Lead Implementer (DP27701LI) exam

Exame

The “Data Protection 27701 Lead Implementer” exam fully covers the following competence domains:

Domain 1: Concepts and principles of privacy and data protection

Domain 2: EU GDPR and related data protection frameworks

Domain 3: Planning the implementation of a DPMS

Domain 4: Implementing and management of a DPMS

Domain 5: Performance evaluation, auditing and reviewing a DPMS

Domain 6: Improving a DPMS

Domain 7: Preparing for the certification audit of a DPMS

The “Data Protection 27701 Lead Implementer” exam is available in Portuguese and English language.

Duration: 3,5 hours, passing score 70%.

Exam available on-site and online.

This is a two parts exam, with part one being a 40 multiple choice questions (1 hour, closed book) and part two with 10 essay questions (2,5 hours, open book, i.e. the participants can use all the documentation provided during the course).

The exam result is sent via email to the candidate within two months after the examination, being the exam result graduated in qualitative note: “Pass or Fail”.

In the case of a failure, the result will be accompanied with the list of domains in which you had a mark lower than the passing grade.

If the candidate fails the exam, he is entitled to one free retake within a 12 month period from the initial exam date.

Certificação

Data Protection 27701 Lead Implementer (DP27701LI)

After successfully completing the exam, participants can apply to one of the certification levels:: "Data Protection 27701 Provisional Implementer", "Data Protection 27701 Implementer" or "Data Protection 27701 Lead Implementer", depending on their level of experience.

These credentials are available for internal and external auditors.

A certificate will be issued to participants who successfully pass the exam and comply with all the other requirements related to the selected credential. Data Protection 27701 Lead Implementer is a certification program aligned with ISO/IEC 17024 standard.

Informações Gerais

Formação na língua portuguesa ou inglesa.

Recursos materiais da formação online e em Inglês, com acesso online.

Metodologia prática de implementação passo-a-passo de um Programa de Protecção de Dados

Certificado digital de Frequência de Formação Behaviour com 31 créditos CPD/CPE.

Exame de Certificação online, em Português e Inglês. O exame pode ser realizado até 3meses, após a conclusão do curso.

Diploma digital de Certificação e Insígnia digital de Certificação, após sucesso no exame e conclusão do processo de candidatura. Este registo não tem qualquer custo associado.

Se o candidato não for aprovado no exame, tem o direito a uma nova tentativa gratuita dentro de um período máximo de 12 meses, a contar da data do exame inicial.