← All courses

Awareness · Privacy management

ISO/IEC 27701 Awareness

Help every employee protect personal information.

A practical introduction to the 2025 edition of ISO/IEC 27701, now a standalone management system standard for privacy: how a privacy information management system works, PII controllers and processors, and what each person does to protect personal data.

Secure payment by Stripe · for yourself or for your team

Standard and editionISO/IEC 27701:2025

Last updated3 October 2026

Preview this course

Experience the learning
before you enrol.

Watch a sample from ISO/IEC 27701 Awareness before you enrol.

ISO/IEC 27701 AwarenessSample

Learning outcomes

Knowledge you can put to work.

Connect the subject to the responsibilities and decisions people encounter in their roles.

  • Explain what a privacy information management system is and why it matters
  • Describe the difference between a PII controller and a PII processor
  • Recognise how the 2025 edition differs from the 2019 edition
  • Understand the kinds of privacy controls the standard covers
  • Describe how to handle and report a suspected privacy incident

Part of: Privacy and Data Protection Training

Inside the course

A clear path through the essentials.

13 modules, 13 practice checkpoints and a final exam. Video runtimes are approximate; allow additional time for the practice questions and the final exam.

Part 1Module 1Approx. 8 min
  1. Why privacy management matters8 min
  2. Practice: Why privacy management matters3 questions
Part 2Module 2Approx. 8 min
  1. PII, PII principals and the privacy principles8 min
  2. Practice: PII, PII principals and the privacy principles3 questions
Part 3Module 3Approx. 7 min
  1. Controllers and processors7 min
  2. Practice: Controllers and processors3 questions
Part 4Module 4Approx. 8 min
  1. ISO/IEC 27701:2025: what it is and how it is built8 min
  2. Practice: ISO/IEC 27701:2025: what it is and how it is built3 questions
Part 5Module 5Approx. 8 min
  1. Context, scope and leadership8 min
  2. Practice: Context, scope and leadership3 questions
Part 6Module 6Approx. 7 min
  1. Privacy risk and the statement of applicability7 min
  2. Practice: Privacy risk and the statement of applicability3 questions
Part 7Module 7Approx. 7 min
  1. People and documented information7 min
  2. Practice: People and documented information3 questions
Part 8Module 8Approx. 7 min
  1. Controllers: purpose, lawful basis and consent7 min
  2. Practice: Controllers: purpose, lawful basis and consent3 questions
Part 9Module 9Approx. 7 min
  1. The rights of PII principals7 min
  2. Practice: The rights of PII principals3 questions
Part 10Module 10Approx. 7 min
  1. Privacy by design and by default, and sharing PII7 min
  2. Practice: Privacy by design and by default, and sharing PII3 questions
Part 11Module 11Approx. 7 min
  1. When you process PII for a customer7 min
  2. Practice: When you process PII for a customer3 questions
Part 12Module 12Approx. 7 min
  1. Securing PII and handling breaches7 min
  2. Practice: Securing PII and handling breaches3 questions
Part 13Module 13Approx. 7 min
  1. Checking, improving, and your part7 min
  2. Practice: Checking, improving, and your part3 questions

Frequently asked questions

Your questions,
answered.

About ISO/IEC 27701 Awareness, its certificate and enrolment.

Ask Sterling
Who is ISO/IEC 27701 Awareness training for?

It is for employees, managers and teams who handle personal information of customers, staff or others, in organisations that act as PII controllers, PII processors or both. No prior privacy knowledge is needed. The course helps every employee understand how a privacy information management system works and what they do each day to protect personal data.

What does the ISO/IEC 27701 Awareness course cover?

It covers why privacy management matters; key terms such as PII, PII principals, controllers and processors; what changed in the 2025 edition; context, scope and leadership for privacy; privacy risk assessment and treatment; the Annex A controls for PII controllers and processors in plain words; performance evaluation, incidents and continual improvement; and each person's part in protecting personal information.

How long does the ISO/IEC 27701 Awareness course take?

ISO/IEC 27701 Awareness is a set of short video modules followed by practice questions and a final exam. The course page shows the current number of modules and the approximate video runtime; allow additional time for the practice questions and the exam. With 12 months of access, you can complete it in one sitting or spread it over several sessions.

Do learners receive a certificate?

Yes. Learners who reach the 70% pass mark in the final exam receive a Sterling Academy Certificate of Completion for ISO/IEC 27701 Awareness. Each certificate carries a unique number and a QR code, and anyone can check it online using the certificate number and the holder's surname. It is a training certificate for the individual learner.

Is the course online and self-paced?

Yes. ISO/IEC 27701 Awareness is a self-paced online course made of short video modules, in English with captions. You study at your own pace during 12 months of access, and practice questions after modules help you check your understanding before the final exam. If a point is unclear, questions are answered by a Sterling consultant.

Can we enrol a team, and how much does it cost?

ISO/IEC 27701 Awareness is US$19 per learner. Teams save 20% for 11 to 50 learners and 30% for 51 to 200 learners; 201 or more learners are priced on request. Client administrators can track their team's progress. Prices are in US dollars, excluding taxes, and Sterling confirms final pricing and enrolment.

Does this course make our organisation ISO 27701 certified?

No. The Certificate of Completion is a training certificate: it shows that one person completed ISO/IEC 27701 Awareness and reached the pass mark in its final exam. It is not certification of an organisation to ISO/IEC 27701, and Sterling does not certify organisations. An organisation is certified by an independent certification body after that body's own audit.

What changed in ISO/IEC 27701:2025?

The 2025 edition makes ISO/IEC 27701 a standalone management system standard for privacy. The course explains how the 2025 edition differs from the 2019 edition, how a privacy information management system works, and the difference between a PII controller and a PII processor, so that learners understand the controls that apply to their role.

Learning path

Where this course sits.

This course

ISO/IEC 27701 Awareness

Build awareness of privacy information management, the handling of personal information and the responsibilities that support consistent privacy practices.

Next step

GDPR Awareness

Handle EU personal data with confidence, every day.

View course

Assessment & completion

Complete the learning.
Keep a verifiable record.

Learners who complete the course and its final exam receive a numbered Sterling Academy Certificate of Completion with online QR verification.

This records course completion. It does not confer ISO certification or a professional auditor qualification.

Pass mark
70%
Prerequisites
None
Ask about course requirements

Your next step

Ready to implement ISO/IEC 27701?

Expert and experienced consultants, 8,100+ client engagements in 60+ countries, from gap assessment to a system ready for its certification audit.

Talk to a Sterling consultant

Run it in Effivity

Effivity is our no-code ISO and GRC software: documents, risks, audits, nonconformities and corrective actions, objectives and training records in one place.

Start an Effivity trial

Not sure which course?

Plan your next step
in learning.

Discuss your learning needs