Information Security, Privacy & IT
ISO/IEC 27701:2025 Privacy Information Management – Internal Auditor
Overview
A practical programme that equips staff to audit their own organisation against ISO/IEC 27701:2025. Participants learn to plan an internal audit, gather objective evidence, write clear findings and support corrective action, in line with ISO 19011.
The standard
About the standard
ISO/IEC 27701:2025
Privacy Information Management System
The 2025 edition turns privacy information management into its own stand-alone, certifiable management-system standard rather than a bolt-on to ISO/IEC 27001. It sets out requirements and supporting guidance for building and continually improving a Privacy Information Management System covering both organizations that control personal data and those that process it on others' behalf. Because certification no longer requires first holding an ISO/IEC 27001 certificate, the standard broadens its reach while still allowing integration with ISO/IEC 27001 for organizations that want it.
Key objectives
- Define requirements for a stand-alone Privacy Information Management System
- Allow independent PIMS certification without a prerequisite ISMS certificate
- Distinguish obligations for PII controllers versus PII processors
- Enable integration with ISO/IEC 27001 and other management-system standards
- Help organizations evidence compliance with global data-protection laws
Who uses it
Organizations that process personal data as controllers or processors.
Contribution to the SDGs
Per ISO, ISO/IEC 27701 contributes to the following UN Sustainable Development Goals:
Learning outcomes
What you will be able to do
- Explain the intent and key requirements of ISO/IEC 27701:2025
- Prepare an internal audit plan and checklist
- Gather objective evidence and record findings
- Write nonconformity statements and support root-cause analysis
- Report audit results to management
Who should attend
Staff joining an internal audit team, process owners and quality, safety or compliance coordinators.
More in Information Security, Privacy & IT
All Information Security, Privacy & IT
Internal AuditorISMS-01Information Security, Privacy & IT
ISO/IEC 27001:2022 Information Security – Internal Auditor
Lead AuditorISMS-02Information Security, Privacy & IT
ISO/IEC 27001:2022 Information Security – Lead Auditor
Lead ImplementerISMS-03Information Security, Privacy & IT
ISO/IEC 27001:2022 Information Security – Lead Implementer
AXIOS · Certification body
Looking for management-system certification?
AXIOS certification is a separate, impartial certification body: audits, certification decisions and the public register of ISO certificates.