The ISO/IEC 27701 Bundle consists of the PECB ISO/IEC 27701 Toolkit, the ISO/IEC 27701 Standard, and the PECB ISO/IEC 27701 Introduction Training Course.

The PECB ISO/IEC 27701 Toolkit contains documents needed for the implementation and auditing of a Privacy Information Management System (PIMS). While the ISO/IEC 27701 Lead Implementer and Lead Auditor training courses provide information on how to implement and audit a PIMS, the toolkit provides the necessary tools/documents that are practically needed while implementing and auditing the management system. The documents are various, such as matrixes, reports, templates, policies, forms, procedures, checklists, records, and plans, some of them are: Statement of Applicability (SoA) template, Privacy policy, Internal audit report, Management review form, Risk assessment matrix, PII breaches reporting form, Information security and privacy training awareness session, Pseudonymization and anonymization policy, Stage 1 audit report, Sage 2 audit report, Audit plan template, PIMS audit checklist. The toolkit will have a total of 31 files from which 21 are on the ISO/IEC 27701 Lead Implementer training course and 10 others are on the ISO/IEC 27701 Lead Auditor training course.

The ISO/IEC 27701 Standard specifies requirements and provides guidance for establishing, implementing, maintaining and continually improving a Privacy Information Management System (PIMS) in the form of an extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy management within the context of the organization. This document specifies PIMS-related requirements and provides guidance for PII controllers and PII processors holding responsibility and accountability for PII processing. This document is applicable to all types and sizes of organizations, including public and private companies, government entities and not-for-profit organizations, which are PII controllers and/or PII processors processing PII within an ISMS.

The PECB ISO/IEC 27701 Introduction Training Course – will enable participants to gain or expand their knowledge on the relevant standard or field. The ISO/IEC 27701 Introduction training course enables you to understand the basic concepts of information security and the privacy information management system based on ISO/IEC 27701. This introduction training course will explain the structure of the standard, including its requirements and controls.