About this course
Learners will be able to:
- Essentials of country-specific Personal Data Privacy Regulations: Singapore PDPA
- Fundamentals of ISMS (Information Security Management System) as per ISO/IEC 27001 Standards
- Additional requirements for Clauses of ISO/IEC 27001 Standards and Controls of ISO/IEC 27002 Standards
- Additional requirements for Controllers and Processors of Personal Identifiable Information (PII)
- Implementation guidance
Suggested Prerequisite• It is ideal that persons attending this Course already be familiar with ISO/IEC 27001 Standard, including its’ terminology and implementation in order to draw full benefits from the Course.
Course Content
Day 1 :
Understanding Singapore PDPA
- Overview of Singapore PDPA
- Terms and Definitions: Singapore PDPA
- Applicability of PDPA
- PDPC and Administration of the PDPA
- General Rules: protection of personal data
- Collection, use and disclosure of personal data
- Access and Correction of personal data
- Care of personal data
- Other requirements of Singapore PDPA
Day 2:
Refreshing our understanding of ISMS
- Context of the Organization
- Establishing the Scope of an Organization’s ISMS
- Actions to Address Risks and Opportunities
- Establishing ISMS Objectives
- Operational Planning and Control
- Leadership actions
- Support
- Performance Evaluation
- Improvements
Day 3:
Specific Requirements of ISO 27701 as an extension of ISO 27001 Standard
- Structure of ISO 277001 Standard
- Additional Requirements related to Context of the Organization
- Additional Requirements related to Actions to Address Risks and Opportunities
- Personal Data related ‘additional Controls’ based on ISO 27002 Standard / Annex A of ISO 27001 Standard
Day 4:
Specific Requirements of ISO 27701 as an extension of ISO 27001 Standard
- Additional Controls for personal-data ‘Controllers’
- Additional Controls for personal-data ‘Processors’
Day 5 :
- Course Review
- Assessment Exam