What is it?
The ISO/IEC 27701:2019 Implementer certification attests that the certified person: possesses or has acquired the knowledge and skills required to implement an information security management system that complies with ISO/IEC 27701:2019 "Extension of ISO/IEC 27001 and 27002 to privacy management - Requirements and guidelines", with the aim of achieving compliance that can be verified by a certification body.
Who can take the exam?
- Supervisors and consultants involved in privacy and data management
- Consultants seeking to master the implementation of a privacy management system
- Those responsible for personally identifiable information (PII) within organizations
- Those responsible for compliance with the requirements of data protection laws
- PIMS team members
How does the exam work?
The exam, in the form of MCQs and a case study, is designed to assess :
- ISO/IEC 27001, ISO/IEC 27002 and ISO/IEC 27701 (principles, vocabulary, organization)
- Planning and implementation of a PIMS
- Monitoring of an existing PIMS, its control and the continuous improvements implemented.
This exam is available on ouronline exam platform. To register, visit our Registration page.
If you have any questions, please fill in our form by selecting the subject "information on certification of personal skills", and we'll get back to you within a few days.
Why Choose LSTI?

Recognized expertise
With more than twenty years of experience, LSTI supports more than 300 organizations in France and across Europe as a certification body and leading assessment center, operating in the fields of cybersecurity, digital trust, and information security.

Specialized Auditors
Our audit teams are composed of experienced professionals who are well-versed in ANSSI’s cybersecurity standards, information security management practices, and European digital trust frameworks. Their approach ensures rigorous, balanced assessments that are tailored to the operational contexts of each organization.

Independent Third Party and Dedicated Support
LSTI guarantees impartiality, transparency, and consistency throughout the entire process: preparation, audits, monitoring, and renewals. A dedicated point of contact ensures continuity and clarity throughout the certification process.

