A tailored course, built for your situation
Mastering ISO 27701 for Facilities and Property Compliance Leaders
Achieve compliance readiness faster with a structured, repeatable implementation path
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Struggling to turn privacy framework mandates into completed, defensible documentation?
The situation this course is for
Many compliance leaders face delays because implementation is fragmented. Legal owns policy, IT handles access controls, and facilities manage physical logs, yet no one owns the full ISO 27701 artefact. The SoA stalls, audit deadlines loom, and teams revert to manual, error-prone processes.
Who this is for
Senior compliance or facilities leader responsible for data protection in UK-regulated environments, with governance or property oversight
Who this is not for
This is not for junior auditors, IT-only security teams, or organisations seeking only awareness training
What you walk away with
- Produce a complete, control-mapped Statement of Applicability within four weeks
- Align facility-specific data flows with ISO 27701 Annex A requirements
- Reduce review cycles by using pre-validated clause interpretations
- Document data processing activities specific to property and facilities operations
- Own the end-to-end privacy implementation track without external consultants
The 12 modules (with all 144 chapters)
Module 1. Understanding ISO 27701 and Its Role in UK GDPR Alignment
Lay the foundation by mapping ISO 27701 to UK data protection obligations and facilities-specific data contexts.
12 chapters in this module
- Scope of ISO 27701 vs UK GDPR
- Core definitions: PII, processing, controller vs processor
- Linking privacy framework to physical estate data
- Regulatory expectations in UK public and private sectors
- Why facilities leaders are now central to compliance
- Common misconceptions about certification
- How DPA overlaps with ISO 27701 scope
- Role of the Information Commissioner's Office
- Key vs supporting controls in practice
- Assessing organisational maturity
- Baseline for implementation pace
- First steps checklist
Module 2. Establishing the Project Foundation and Governance
Build a leadership-aligned implementation plan with clear roles, milestones, and stakeholder map.
12 chapters in this module
- Defining the project scope
- Securing executive sponsorship
- Identifying internal stakeholders
- Facilities as data processors
- Engaging legal and IT early
- Timeline for SoA delivery
- Resource planning
- Risk register setup
- Communication plan
- Steering committee structure
- Success metrics definition
- Kickoff checklist
Module 3. Data Inventory and Flow Mapping for Facilities
Catalog personal data across access logs, maintenance records, and vendor contracts.
12 chapters in this module
- Identifying PII sources
- Walkdown process for physical sites
- Vendor data processing flows
- Resident and tenant data registers
- Visitor log systems
- CCTV and biometric data
- Security personnel databases
- Data retention schedules
- Data flow diagramming
- Classifying data sensitivity
- Linking to Article 30 requirements
- Inventory validation
Module 4. Scope Definition and Boundary Setting
Clarify what is in and out of scope for certification, with examples from property operations.
12 chapters in this module
- Defining certification scope
- Exclusions justification
- Physical and logical boundaries
- Multi-site data handling
- Managed service boundaries
- Third-party dependencies
- Tenant data isolation
- Estate management systems
- Scope documentation
- Internal review steps
- Final approval process
- Boundary checklist
Module 5. Annex A Control Mapping to Facilities Context
Translate ISO 27701 controls into actions relevant to property and central services operations.
12 chapters in this module
- Control 5.2: Consent management
- Control 6.1: Data access policies
- Control 7.1: Onboarding compliance
- Control 8.1: Physical access logs
- Control 9.1: Vendor DPA checks
- Control 10.1: Incident response
- Control 11.1: Data retention
- Control 12.1: Training records
- Control 13.1: Audit trail access
- Control 14.1: Marketing opt-outs
- Control 15.1: Breach notification
- Control 16.1: Cross-border transfers
Module 6. Building the Statement of Applicability
Assemble a complete, justified SoA with facilities-specific rationale for inclusion or exclusion.
12 chapters in this module
- Template structure
- Control inclusion criteria
- Exclusion justification rules
- Management sign-off
- Linking to Article 30
- Version control
- Comment tracking
- Stakeholder review
- Approved SoA format
- Revision cycle
- Integration with ISO 27001
- SoA handover process
Module 7. Privacy by Design in Facility Operations
Embed data protection into maintenance, access, and vendor contracts.
12 chapters in this module
- Design stage integration
- RFP language for vendors
- Data protection impact assessments
- Security by default
- Access control design
- CCTV placement rules
- Visitor registration forms
- Biometric use policies
- Resident data portals
- Tenant communication
- Training integration
- Design audit trail
Module 8. Staff and Contractor Training Programmes
Develop role-specific training for security, maintenance, and front-desk staff.
12 chapters in this module
- Audience segmentation
- Learning objectives
- Content development
- Delivery methods
- Record keeping
- Completion tracking
- Refresher cycles
- Role-specific scenarios
- Contractor onboarding
- Third-party verification
- Training effectiveness
- Audit trail documentation
Module 9. Internal Audit Preparation and Readiness
Prepare for certification audit with mock reviews and evidence collection.
12 chapters in this module
- Audit timeline
- Evidence checklist
- Document accessibility
- Interview preparation
- Common findings
- Gap tracking
- Corrective action plans
- Audit simulation
- Facilities walkthrough
- Vendor audit prep
- Legal alignment
- Final readiness review
Module 10. Certification and External Audit Management
Navigate the certification process with auditor expectations and documentation ready.
12 chapters in this module
- Choosing a certification body
- Stage 1 audit prep
- Stage 2 audit prep
- Evidence submission
- Audit day roles
- Finding response
- Certification issuance
- Surveillance audits
- Maintaining certification
- Cost planning
- Re-certification cycle
- Audit handbook
Module 11. Ongoing Compliance and Continuous Improvement
Sustain ISO 27701 compliance with routine reviews and updates.
12 chapters in this module
- Review frequency
- Change management
- Incident follow-up
- Policy updates
- Training refresh
- Evidence archiving
- Stakeholder reporting
- Internal audit schedule
- Management review meetings
- KPI tracking
- Benchmarking
- Continuous improvement plan
Module 12. Scaling Across Sites and Business Units
Replicate the implementation in multi-site or multi-region operations.
12 chapters in this module
- Centralised governance model
- Local adaptation rules
- Training rollout
- Audit consistency
- Vendor standardisation
- Data transfer rules
- Local legal variation
- Regional leadership roles
- Performance tracking
- Lessons learned
- Expansion timeline
- Scaling playbook
How this maps to your situation
- Initial scoping and leadership buy-in
- Data discovery across property operations
- Control mapping with facilities context
- Sustaining compliance across estate
Before vs. after
Before
Manual, fragmented efforts to compile privacy compliance across facilities, with long review cycles and external dependency.
After
Rapid, internal capability to produce complete and justified ISO 27701 documentation, from scoping to SoA, in under a month.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 2-3 hours per week over 12 weeks, with flexible pacing and downloadable resources for offline use.
If nothing changes
Without a structured path, organisations face delayed certification, repeated audit findings, and reliance on costly consultants for routine compliance tasks.
How this compares to the alternatives
Unlike generic ISO 27701 awareness courses, this programme delivers a complete implementation pathway tailored to facilities and property operations, with real-world examples and artefacts.
Frequently asked
Who is this course for?
Senior compliance, facilities, or property leaders responsible for data protection in multi-site or regulated environments.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Can I access the materials after the course?
Yes, all templates and the implementation playbook are yours to keep and reuse across projects.
$199 one-time. Approximately 2-3 hours per week over 12 weeks, with flexible pacing and downloadable resources for offline use..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours