ISO/IEC 27701 Course in Defence Data Privacy
Online 300-hour course in ISO/IEC 27701 in defence data privacy. 6 modules covering ISO/IEC 27701 (privacy information management), Regulation (EU) 2016/679 (GDPR) and PILAR (CCN). Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Analyse the privacy challenges in defence organisations.
Interpret the requirements and controls of ISO/IEC 27701.
Establish the governance of personal data and the record of processing activities.
Carry out a data protection impact assessment.
Define technical and organisational measures proportionate to risk.
Manage personal data breaches and their notification.
Plan the audit and continuous improvement of the privacy system.
Who it's for
- Data protection officers who want to specialise in ISO/IEC 27701 in defence data privacy.
- Privacy managers who want to specialise in ISO/IEC 27701 in defence data privacy.
- ISO/IEC 27701 auditors who want to specialise in ISO/IEC 27701 in defence data privacy.
- Data protection consultants who want to specialise in ISO/IEC 27701 in defence data privacy.
- Regulatory compliance analysts who want to specialise in ISO/IEC 27701 in defence data privacy.
- Information security managers who want to specialise in ISO/IEC 27701 in defence data privacy.
- Engineering or science graduates seeking to enter the defence industry.
What you'll work with
- ISO/IEC 27701 (privacy information management)
- Regulation (EU) 2016/679 (GDPR)
- Organic Law 3/2018 (LOPDGDD)
- ISO/IEC 29100 (privacy framework)
- ISO/IEC 29134 (privacy impact assessment)
- Directive (EU) 2016/680 (police and criminal justice processing)
- ISO/IEC 27001 (information security management)
6 modules · 300 h
1.1Why a defence organisation also processes personal data1.2Staff, supplier and third-party data1.3Tension between mission confidentiality and data subject rights1.4General data protection framework and its exceptions1.5Specific regimes for national security1.6Information classification versus categories of personal data1.7Actors: controller, processor and data protection officer1.8Common vocabulary between lawyers and engineers1.9Reputational and sanctioning risks1.10Exercise: inventorying a unit's processing activities
2.1Relationship with ISO/IEC 27001 and 270022.2Scope of the privacy information management system2.3Context, interested parties and leadership2.4Controller and processor roles within the standard2.5Additional controls and their normative mapping2.6Mandatory system documentation2.7Integration with an existing security system2.8Certification and audit process2.9What certification provides and what it does not resolve2.10Practice: defining the scope of a privacy system
3.1Record of processing activities3.2Lawful bases applicable to the sector3.3Data minimisation and purpose limitation3.4Retention periods and secure deletion3.5Data subject rights and how to respond to them3.6International transfers and safeguards3.7Relationship with suppliers and processing contracts3.8Subcontracting and supply chain3.9Staff training and awareness3.10Practice: drafting the record of processing for a process
4.1When an impact assessment is mandatory4.2Methodology and content of the assessment4.3Risk analysis for individuals' rights4.4Privacy by design and by default4.5Pseudonymisation, encryption and segregation4.6Access control and traceability4.7Processing of biometric and location data4.8CCTV and attendance monitoring4.9Prior consultation with the supervisory authority4.10Practice: carrying out a complete impact assessment
5.1Detection and classification of a personal data breach5.2Notification to the authority and to affected individuals5.3Coordination with security incident management5.4Breach register and documentation5.5Internal audit of the privacy system5.6Indicators and management review5.7Non-conformities and corrective actions5.8Inspections by the supervisory authority5.9Continuous improvement and regulatory updates5.10Practice: managing a simulated breach from start to finish
6.1Choice of organisation and scope6.2Inventory of processing activities and assets6.3Gap analysis against the standard6.4Design of the privacy management system6.5Impact assessment of a critical processing activity6.6Implementation and training plan6.7Audit plan6.8Budget and schedule6.9Technical report6.10Project defence
How you'll learn
100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. No fixed timetables: students progress at their own pace within the intake, which makes it possible to combine the course with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is PILAR (CCN), Gestiona EIPD (AEPD), OneTrust, advanced Excel, in free, academic or evaluation versions. Case studies are based on real procedures for data protection impact assessments, privacy audits and breach notification simulations. Assessment is continuous per module, plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Analyse the privacy challenges in defence organisations.
Interpret the requirements and controls of ISO/IEC 27701.
Establish the governance of personal data and the record of processing activities.
Carry out a data protection impact assessment.
Define technical and organisational measures proportionate to risk.
Where this takes you
Requirements
- No prior degree is required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme consists of 300 hours in total, spread over 3 to 5 months. This averages between 10 and 15 hours per week, compatible with a full-time job.
You will work with PILAR (CCN), Gestiona EIPD (AEPD), OneTrust, advanced Excel. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
An SEIUM own diploma upon passing the continuous assessment and the integrative project. It is in-house training, not an official Ministry qualification.
Yes. Modules passed in a course or postgraduate diploma in the same area can be credited towards the advanced programme. Please check the credit transfer policy when you enrol.
Related programmes
Course on IAEA Standards for Military Nuclear Incidents
Online 300-hour course on IAEA standards for military nuclear incidents. 6 modules covering the Convention on Early Notification of a Nuclear Accident (1986), the Convention on…
Course in IEEE Certification Standards for Autonomy
Online 300-hour course in IEEE certification standards for autonomy. 6 modules covering IEEE 7000-2021 (ethically aligned design), IEEE 7001-2021 (transparency of autonomous systems) and ROS 2.…
Course in Ethics in Academic Ergonomics Testing
Online 300 h course in ethics in academic ergonomics testing. 6 modules covering the WMA Declaration of Helsinki, Regulation (EU) 2016/679 (GDPR) and Siemens Jack. Dedicated…
More in Defense, Military Engineering & Land Systems
All Defense, Military Engineering & Land Systems programmes → · How to apply · Fees & financing · Scholarships