Popular ISO 9001 Quality management > ISO 13485 Quality management for medical devices > ISO 14001 Environmental management > ISO 22301 Business continuity > ISO/IEC 27001 Information security > ISO 45001 (OHSAS 18001) Occupational health and safety > View all standards >
Access and buy standards How to access standards > Decide which option works best for your business Buy standards > Standards subscriptions > BSOL > Full standards collections Compliance Navigator > Medical device standards Eurocodes PLUS > Structural design standards BSI Membership > Services include knowledge centre, events and discounts
About standards What are standards? > Find out on how standards can help The role of BSI > UK Standards Organization, ISO, IEC, CEN, CENELEC, ETSI Get involved > Become a standards maker, join a committee Have your say > Propose or comment on a standard Consumer alerts > Know which products have been recalled
Working with standards Business and industry > Build trust and win more business, no matter the size of your company Government > Enhancing standards infrastructure, technical assistance and capacity building Education > Supporting students, research programmes, and young professionals Consumers > Tackling issues consumers face through BSI Kitemark and Consumer and Public Interest Network (CPIN)
Standards and information Access and buy standards > Search our standards catalogue Develop a standard > Work with BSI to develop a standard Online subscription services > BSOL, Compliance Navigator, Eurocodes PLUS, BSI Membership and SCREEN Standards services > Create a fast-track standardization document, Consultancy, Research and Insights and International Projects
Auditing, certification and training Assessment and ISO certification > ISO certification and others eg: IATF, FSSC Auditing and verification > Supplier audits, custom audits and internal audits Product testing and certification > BSI Kitemark, CE marking and verification, Market access solutions Validate BSI-issued certificates > Check company, site and product certificates
Training courses > Individual, group and company-wide training Medical devices services > CE marking for medical devices, MDR and IVDR, quality management for medical devices Compliance software and solutions > Software tools and solutions for governance, cyber security, risk and supply chain management
Consulting practices Cybersecurity and information resilience > Standards Consulting > Management advisory service Supply chain management > View all BSI services >
Industry reports, research and news Digital construction > BIM, smart cities and connected assets Future of mobility > Global market access > Health, safety and wellbeing > Information security > Cybersecurity, privacy (GDPR) and compliance
Innovation > Internet of things (IoT) > Organizational resilience > Sustainability and circular economy > View all topics >
Blogs Built Environment > Cybersecurity and information resilience > Food Industry > Medical devices > Small Business > View all blogs >
About BSI > BSI impartiality > Our accreditation > Our clients and partners > Our financial information >
Our governance > Our legal information > Our Royal Charter > UK National Standards body > The global role of BSI as the national standards body
Careers > Events and conferences > Media centre > Social responsibility > Modern slavery statement Contact us >
Data protection (GDPR) > Data subject access request (DSAR) > Outsourced data protection officer (DPO) > Cybersecurity and compliance services > Cloud security services > Incident response > Security testing > Vulnerability assessment > PCI DSS consultancy > ISO 27001 consultancy > IT audit and assessment > Cybersecurity audit and assessment > View all our services >
Services Email security > End user security awareness > eDiscovery/eDisclosure and digital forensics > Critical infrastructure security > Security testing cyber lab > Ransomware prevention and recovery > Public sector services >
Our solutions Secure web gateway > Cloud access security broker > Identity and access management > Managed security > Cloud encryption > Vulnerability management > Cloud and endpoint data backup > View all our solutions >
Our partners Zscaler > Proofpoint > McAfee > Okta > Druva > Alert Logic > Qualys > BitSight > MediaPRO >
Cybersecurity training courses Certified Information Privacy Professional Europe (CIPP/E) > Certified Data Protection Officer (CDPO) training course > Certified Information Security Manager (CISM®) > Certificate in Information Security Management Principle (CISMP) > View all cybersecurity training courses >
Training solutions Proofpoint - End user security awareness training > MediaPRO - Cybersecurity and Privacy Education >
Certified Lead Privacy Implementer (CLPI) training course Our four-day Certified Lead Privacy Implementer course enables you to develop the expertise to implement and manage a privacy framework based on ISO 29100, the Generally Accepted Privacy principles and guidance from international information commissioners. You'll learn about best practice approaches to design, build and lead an organization's privacy program to cover business processes, ICT systems and services. This will include an understanding of a privacy framework based on common privacy terminology, the actors and their roles in processing personally identifiable information (PII), and privacy safeguarding considerations. References to known privacy principles for information technology will also be covered. By attending this course you'll develop the knowledge and skills to build privacy frameworks that help organizations maintain compliance to global privacy legislation and directives. As part of this course, you'll have the opportunity to complete the PECB Certified Lead Privacy Implementer exam, which on successful completion will gain your recognized CLPI status. Who should attend? Those with existing knowledge on the privacy framework in information security and whose responsibilities include compliance and privacy issues, such as: Security consultants and system architects Data protection and privacy officers IT developers Privacy by design responsibilities What will I learn? Day 1 Introduction to ISO 29100 privacy framework concepts ISO 29100 privacy and regulatory frameworks Fundamental principles of privacy Global privacy legislation, including new EU directives Writing a business case and a project plan for implementing a privacy framework Initiating the privacy framework implementation Day 2 Preliminary analysis of existing controls Privacy framework project leadership and approval Define the scope of a privacy framework project Develop a privacy policy Select the approach and methodology for a risk assessment Control statement and management decision to implement the privacy framework Define the organizational structure of privacy Day 3 Implement a document management framework Design controls, writing procedures and specific policies Implementing privacy controls Develop and communicate a training and awareness program on your privacy framework Incident management Operations management Day 4 Monitor, measure, analyse and evaluate Internal audit Management review Treatment of problems and points of concern Continual improvement Competence and evaluation of implementers How will I benefit? Understand how to design, build and lead an organization's privacy programs covering business processes, ICT systems and services Knowledge of ISO 29100 best practice privacy frameworks Be confident to develop a privacy framework that supports with compliance to privacy legislation What's included? Lunch Refreshments A certificate of attendance
