Bundle: PECB ISO/IEC 27701 Lead Implementer + Lead Auditor
This bundle gives you both PECB ISO/IEC 27701 courses in eLearning format, delivered by reconn. The Lead Implementer course teaches you to plan, build and maintain a privacy information management system (PIMS). The Lead Auditor course teaches you to audit one and lead an audit team. Each course ends with its own PECB exam and leads to its own credential path. Both are in English and you set your own pace inside PECB's 12-month window.
How it works
- Enroll on reconn.io. Your enrollment is confirmed the same day.
- Study on myPECB. PECB's eLearning content and quizzes for both courses are in your myPECB account. Go as fast or as slowly as you like.
- Book your two 60-minute 1-on-1 sessions. Message us by email or WhatsApp and we schedule one for each course with a PECB Certified Trainer.
- Sit the two exams. You schedule each yourself in the PECB Exams app and take it online with a remote PECB invigilator.
- Apply for your credentials. Apply in myPECB. Both application fees are already paid.
Course facts come from the PECB course pages and the PECB Candidate Handbooks for ISO/IEC 27701 Lead Implementer and Lead Auditor.
Your two 60-minute 1-on-1 sessions
Every enrollment includes two live 60-minute sessions with a PECB Certified Trainer from reconn, one for each course. They are working conversations about your own situation, not a repeat of the lessons. You book them by email or WhatsApp after you enroll.
| Session | Typical use |
|---|---|
| Lead Implementer session | Scoping a PIMS, deciding the controller and processor roles, privacy risk assessment, choosing Annex A controls, or the implementation project plan |
| Lead Auditor session | Audit planning, reading a scenario, working out audit evidence, drafting a nonconformity, or exam strategy |
| If you are... | Bring this to the sessions |
|---|---|
| A privacy or compliance professional | The program you run or want to run. We separate what the standard requires from what the law requires, and check how an auditor would see it. |
| An ISO/IEC 27001 implementer or auditor | Your current ISMS or audit habits. We look at what privacy adds, including the PII controller and processor roles. |
| A consultant | A client scenario with details removed. We practice a repeatable approach for scoping, implementing and auditing a PIMS. |
| Preparing for the exams | The domains you find hardest. We practice reading scenarios and finding answers in an open-book setting. |
| Planning your career | Your experience and goals. We map them to the Provisional, Implementer, Auditor or Lead credential levels. |
The sessions are not legal advice and do not review your organization's documents for compliance.
Unlimited email and WhatsApp support
Support runs from the day you enroll until you clear the exams, within 12 months of enrollment. You reach a person at reconn, not a ticket queue. We are available daily from 6:00 AM to 10:00 PM Gulf Standard Time (GMT+4), including weekends.
| You can ask about | Examples |
|---|---|
| The content | A concept in the standard, the difference between two terms, how a control applies to your case |
| The exam process | Booking in the PECB Exams app, ID and camera rules, extra time on request, what happens after a result |
| Your PECB account | Finding your courseware in myPECB, your enrollment, your exam attempts |
| Your applications | Choosing a credential level, logging project or audit hours, references, the application steps |
Message us on WhatsApp (+971 5857 26270) or email hello@reconn.io.
What is included
One package, one price, nothing to add. Prices live in the buy box above, so this table lists what you get.
| Item | Bundle, eLearning, English |
|---|---|
| PECB eLearning courses | Lead Implementer and Lead Auditor: course content and quizzes on myPECB for both |
| Exam attempts | Four: a first attempt and one free retake for each exam, used within 12 months of receiving each PECB coupon |
| Certification application fees | Both included |
| First-year annual maintenance fees | Both included |
| 1-on-1 sessions | Two 60-minute live sessions with a PECB Certified Trainer, one for each course |
| Support | Unlimited email and WhatsApp until you clear the exams, within 12 months of enrollment |
| Delivery | Same-day enrollment confirmation, then study on myPECB |
| Language | English |
| CPD | An attestation of completion for each course |
| Exams | Taken online in the PECB Exams app, supervised remotely by PECB |
The first exam attempt, one free retake, the application fee and the first-year maintenance fee are included for candidates who complete a course delivered by a PECB partner, per the PECB Candidate Handbooks.
Why enroll with reconn
The PECB courses, the exams and the credentials are the same wherever you buy. What changes is the help you get before and after you pay.
| What you get | reconn. | Other providers |
|---|---|---|
| Official PECB eLearning, exams and credentials | Yes | Yes |
| Application fees and first-year maintenance fees included | Yes | Yes |
| 1-on-1 sessions with a PECB Certified Trainer | Two 60-minute sessions, included | Not included |
| Support while you study | Unlimited email and WhatsApp until you clear the exams | No course support |
Before you buy: how to avoid look-alike PECB programs
Some sellers use PECB names and logos without being a PECB partner. Check six things before you pay anyone, including us.
- The seller appears in PECB's list of active partners on pecb.com.
- Your courseware and exams come through your own myPECB account and the PECB Exams app, not through a PDF or a shared login.
- The exams are invigilated by PECB. Nobody else can run them for you.
- The price says what is included: exam attempts, application fees and first-year maintenance fees.
- You can talk to a named person before you pay.
- Nobody promises you will pass. PECB exams cannot be guaranteed, and a promise like that is a warning sign.
reconn. difference
We are an applied AI and cybersecurity company, not a course factory. Every learner gets a mentor who works in the field, a person to message when stuck, and honest advice, including advice not to buy a course you do not need. Every great mission starts with reconn.
ISO/IEC 27701 explained
ISO/IEC 27701 is the international standard for a privacy information management system. It tells an organization how to set up the policies, processes, roles and controls it needs to manage the personal data it handles, and how to keep improving them. Implementers build that system and auditors check whether it works. This bundle covers both sides.
The standard at a glance
| Item | Detail |
|---|---|
| Standard | ISO/IEC 27701, Privacy information management systems: requirements and guidance |
| Current edition | Edition 2, published October 2025, 64 pages (ISO lists the month only). Both courses are based on this 2025 edition |
| Type | An independent management system standard, according to ISO's catalogue entry |
| What it specifies | Requirements for establishing, implementing, maintaining and continually improving a PIMS, plus guidance on applying them |
| Who it is designed for | Organizations that act as PII controllers or PII processors |
PII controller or PII processor
The role of the organization decides which privacy objectives and controls apply to it. An organization can be one or the other, or both for different activities. Implementers work out the role to design the right controls. Auditors work it out to know what evidence to expect.
| Role | Meaning, as ISO/IEC 29100 defines it | Typical examples |
|---|---|---|
| PII controller | The privacy stakeholder that determines the purposes and means of processing personally identifiable information | A retailer deciding how to use customer data, an employer handling staff records |
| PII processor | The privacy stakeholder that processes PII on behalf of, and following the instructions of, a PII controller | A cloud or payroll provider, a marketing platform acting on a client's instructions |
ISO/IEC 27701 terms and GDPR terms
Both exams touch the relationship between ISO/IEC 27701 and GDPR, so you need both vocabularies. The standard uses its own terms, which overlap with GDPR without matching it exactly.
| ISO/IEC 27701 term | Closest GDPR term | Note |
|---|---|---|
| PII | Personal data | Both describe information that relates to an identifiable person |
| PII principal | Data subject | The individual the information is about |
| PII controller | Controller | Determines the purposes and means of processing |
| PII processor | Processor | Processes on the controller's instructions |
| PIMS | No GDPR equivalent | A management system is a standards concept, not a legal one |
One PIMS, two points of view
| Stage | The implementer's job | The auditor's job |
|---|---|---|
| Scope and context | Define the PIMS scope, roles and interested parties | Check the scope and criteria, and confirm the audit is feasible |
| Risk and controls | Assess privacy risk, select and implement Annex A controls | Evaluate how controls were selected and whether they work |
| Documented information | Create and control the policies, procedures and records | Review them against the standard at stage 1 |
| Operation | Run the processes and train the people | Interview, sample and collect evidence on site at stage 2 |
| Performance | Monitor, run the internal audit program, hold management review | Judge the evidence and draft findings and nonconformity reports |
| Improvement | Fix nonconformities and improve the system | Close the audit, evaluate action plans and follow up |
Know the limits
- ISO/IEC 27701 is a management system standard. A PIMS does not by itself make an organization compliant with GDPR or any other law, and nothing here is legal advice.
- The PECB credentials certify you, not your organization. An organization is certified by a certification body after an audit.
- Both courses are based on the 2025 edition of ISO/IEC 27701, which ISO published as an independent management system standard.
Sources
- ISO: ISO/IEC 27701, Privacy information management systems, Requirements and guidance
- ISO: ISO 19011:2018, Guidelines for auditing management systems
- ISO: ISO/IEC 17021-1:2015, Requirements for bodies providing audit and certification of management systems
- EUR-Lex: Regulation (EU) 2016/679 (GDPR)
- PECB: ISO/IEC 27701 Lead Implementer course page
- PECB: ISO/IEC 27701 Lead Auditor course page
- PECB Candidate Handbooks, ISO/IEC 27701 Lead Implementer and Lead Auditor
Checked 10 November 2026.
The two courses side by side
Both courses are five days in PECB's structure and end in an online, open-book exam. They differ in what you learn to do.
| Lead Implementer | Lead Auditor | |
|---|---|---|
| You learn to | Plan, implement, run and improve a PIMS | Plan, conduct and close a PIMS audit and lead an audit team |
| Prerequisite on PECB's page | A fundamental understanding of information privacy | A fundamental understanding of information security and privacy, and comprehensive knowledge of audit principles |
| Heaviest exam domain | Implementation of a PIMS: 23 of 80 questions | Conducting an ISO/IEC 27701 audit: 20 of 80 questions |
| Standards used | ISO/IEC 27701, ISO/IEC 29100, GDPR terminology | ISO/IEC 27701, ISO 19011, ISO/IEC 17021-1 |
| Credential experience unit | PIMS project hours | Audit hours |
| Own page on reconn.io | Lead Implementer course | Lead Auditor course |
You do not need implementation or audit experience to enroll, sit the exams or earn the Provisional credentials.
How certification works
Passing an exam is step one. Each credential comes from PECB after you apply and meet the requirements for the level you want. You apply separately for the Implementer path and the Auditor path.
- Pass the exam. Each exam leads to all four levels of its credential path.
- Create your PECB account and apply. Log in, click Apply for Certificate, and fill in your professional experience and your project or audit hours. The application fees are included in your enrollment.
- Provide two references. They must be people who worked with you and can confirm your expertise. They cannot be people you supervise or relatives. Provisional applicants do not need experience or references.
- PECB reviews your application. You get an email with the decision. If approved, you download your certificate and digital badge from your account.
- Keep each one current. Certifications are valid for three years. You maintain them with CPD hours and an annual maintenance fee. Your first year is included for both.
| Rule | What PECB says |
|---|---|
| Window | Apply within 12 months from the purchase date for eLearning |
| Validity | Three years |
| Maintenance | CPD requirements and the annual maintenance fee |
| If you miss CPD or fees | A 12-month suspension period to fix it, then possible revocation |
| Standard behind the scheme | The handbooks say the certification scheme complies with ISO/IEC 17024 |
Who it is for
The bundle fits people who will both build and check privacy management, and anyone who wants to move between those two jobs.
| Role | Why the bundle fits |
|---|---|
| Privacy managers and data protection professionals | Build the management system, then see it as an auditor does and close the gaps before a certification audit |
| Consultants and expert advisors | Offer implementation and gap audits to clients with credentials for both |
| ISMS managers and ISO/IEC 27001 implementers or auditors | Add privacy to a system you already run or audit, on both the build and the audit side |
| Internal auditors and compliance, risk and governance staff | Audit the PIMS and also understand what it takes to run one |
| PIMS project team members and technical experts | Know what each stage needs from you and what evidence an auditor asks for |
| People responsible for PII or for conformance with privacy requirements | Decide controller and processor duties, set up controls and test that they work |
Before you start: PECB's course pages expect a fundamental understanding of information privacy, plus information security and audit principles for the Lead Auditor. You do not need implementation or audit experience to enroll, sit the exams or earn the Provisional credentials.
What you will be able to do
- Explain the main concepts and principles of a PIMS based on ISO/IEC 27701
- Interpret the requirements of the standard as an implementer and as an auditor
- Plan and start a PIMS implementation with a recognized methodology
- Identify whether an organization acts as a PII controller, a PII processor or both
- Run a privacy risk assessment and treatment process and apply Annex A controls
- Monitor performance, run an internal audit program and conduct management reviews
- Plan, conduct and close an ISO/IEC 27701 audit in line with ISO/IEC 17021-1, ISO 19011 and good audit practice
- Judge audit evidence and draft findings and nonconformity reports
- Manage an ISO/IEC 27701 audit program
- Recognize situations that breach the PECB Code of Ethics
Course agendas
PECB structures each course as five days. Day titles come from PECB's course pages. The topic lists map to the competencies in the PECB handbooks. With eLearning you move through the content at your own pace.
Lead Implementer
| Day | PECB day title | What you work on |
|---|---|---|
| 1 | Introduction to ISO/IEC 27701 and initiation of a PIMS implementation | How the standard developed, privacy and security standards, PIMS and ISMS, GDPR terminology, ISO/IEC 29100 privacy principles, implementation approach and project framework |
| 2 | Implementation plan of a PIMS | Controller and processor roles, resources, the project plan, the PIMS scope, the privacy policy, privacy risk assessment and treatment |
| 3 | Implementation of a PIMS | Capacity building, documented information, operational processes, selecting and implementing Annex A controls, objectives and controls for PII controllers and for PII processors |
| 4 | PIMS monitoring, continual improvement and preparation for the certification audit | Training and awareness, communication, monitoring and measurement, internal audit, management review, nonconformities, continual improvement, stage 1 and stage 2 audits, surveillance and recertification |
| 5 | Certification exam | The PECB Lead Implementer exam, taken online |
Lead Auditor
| Day | PECB day title | What you work on |
|---|---|---|
| 1 | Introduction to the PIMS and ISO/IEC 27701 | How the standard developed, privacy and security standards, PIMS concepts, PII controller and processor roles, GDPR terminology and mapping, ISO/IEC 29100 privacy principles, the requirements of clauses 4 to 10 and Annex A |
| 2 | Audit principles, and preparing for and initiating an audit | Audit concepts and principles from ISO 19011, first, second and third party audits, evidence-based and risk-based auditing, materiality, reasonable assurance, audit objectives, scope and criteria, feasibility, team roles, stage 1 |
| 3 | On-site audit activities | Preparing for stage 2, communication during the audit, audit procedures, test plans, interviews and sampling, collecting and evaluating evidence, auditing clauses 4 to 10 and Annex A controls |
| 4 | Closing the audit | Drafting findings and nonconformity reports, audit documentation, quality review, the closing meeting, evaluating action plans, follow-up, managing an audit program |
| 5 | Certification exam | The PECB Lead Auditor exam, taken online |
The agendas follow PECB's published course pages and handbooks. Your myPECB courseware is the final word on the content.
The exams
You sit two exams, one per course. Both are multiple choice, open book and taken online. Each leads to every level of its own credential path.
Lead Implementer exam domains
| Domain | Competency domain | Questions | Share | Level tested |
|---|---|---|---|---|
| 1 | Fundamental principles and concepts of a privacy information management system | 8 | 10% | Comprehension, application, analysis |
| 2 | Initiation of the PIMS implementation | 7 | 8.75% | Comprehension, application, analysis |
| 3 | Planning of a PIMS implementation based on ISO/IEC 27701 | 15 | 18.75% | Evaluation |
| 4 | Implementation of a PIMS based on ISO/IEC 27701 | 23 | 28.75% | Evaluation |
| 5 | Monitoring and measurement of a PIMS based on ISO/IEC 27701 | 12 | 15% | Comprehension, application, analysis |
| 6 | Continual improvement of a PIMS based on ISO/IEC 27701 | 8 | 10% | Comprehension, application, analysis |
| 7 | Preparation for a PIMS certification audit | 7 | 8.75% | Evaluation |
| Total | 80 | 100% | 35 questions on comprehension, application and analysis, 45 on evaluation |
Lead Auditor exam domains
| Domain | Competency domain | Questions | Share | Level tested |
|---|---|---|---|---|
| 1 | Fundamental principles and concepts of a privacy information management system (PIMS) | 12 | 15% | Comprehension, application, analysis |
| 2 | Privacy information management system requirements | 8 | 10% | Comprehension, application, analysis |
| 3 | Fundamental audit concepts and principles | 15 | 18.75% | Evaluation |
| 4 | Preparing an ISO/IEC 27701 audit | 10 | 12.5% | Comprehension, application, analysis |
| 5 | Conducting an ISO/IEC 27701 audit | 20 | 25% | Evaluation |
| 6 | Closing an ISO/IEC 27701 audit | 7 | 8.75% | Comprehension, application, analysis |
| 7 | Managing an ISO/IEC 27701 audit program | 8 | 10% | Evaluation |
| Total | 80 | 100% | 37 questions on comprehension, application and analysis, 43 on evaluation |
Exam rules that matter
| Rule | Detail |
|---|---|
| Format | 80 multiple-choice questions with three options each: one correct answer and two distractors |
| Question types | Stand-alone questions and scenario-based questions. A scenario is followed by five questions |
| Pass mark | 70% |
| Duration | 3 hours |
| Open book | A hard copy of ISO/IEC 27701, the training course materials and your own notes. Course materials and notes can be accessed in the PECB Exams app or printed |
| Delivery | Online in the PECB Exams app, supervised remotely by a PECB invigilator through a camera. Bring a valid ID. Phones and tablets are not allowed |
| Timing | Be present at least 30 minutes before the exam starts. Late arrivals get no extra time |
| Extra time | 30 additional minutes on Lead exams for non-native speakers, if requested on the day |
| Results | Instant for online multiple-choice exams, with a list of weaker domains if you fail |
| Retakes | Four attempts are included: a first attempt and one free retake for each exam. PECB sets no limit on retakes but applies waiting periods |
| Appeals | Ask for a re-evaluation within 30 days of the result, then appeal within 30 days of the decision |
| Special needs | Request reasonable accommodations through your myPECB dashboard |
PECB does not publish exam questions, and neither do we. The handbooks contain sample scenarios for practice on format.
Credential levels
Each exam leads to four credential levels. They differ in professional experience and in project or audit hours. Every level requires signing the PECB Code of Ethics.
Lead Implementer path
| Credential | Exam | Professional experience | PIMS project hours |
|---|---|---|---|
| PECB Certified ISO/IEC 27701 Provisional Implementer | Lead Implementer exam or equivalent | None | None |
| PECB Certified ISO/IEC 27701 Implementer | Lead Implementer exam or equivalent | Two years, one in privacy information management | 200 hours |
| PECB Certified ISO/IEC 27701 Lead Implementer | Lead Implementer exam or equivalent | Five years, two in privacy information management | 300 hours |
| PECB Certified ISO/IEC 27701 Senior Lead Implementer | Lead Implementer exam or equivalent | Ten years, seven in privacy information management | 1,000 hours |
Project activity includes drafting a PIMS plan, initiating a PIMS implementation, implementing a PIMS, monitoring and managing the implementation, and performing continual improvement measures.
Lead Auditor path
| Credential | Exam | Professional experience | Audit activities |
|---|---|---|---|
| PECB Certified ISO/IEC 27701 Provisional Auditor | Lead Auditor exam or equivalent | None | None |
| PECB Certified ISO/IEC 27701 Auditor | Lead Auditor exam or equivalent | Two years, one in privacy management | 200 hours |
| PECB Certified ISO/IEC 27701 Lead Auditor | Lead Auditor exam or equivalent | Five years, two in privacy management | 300 hours |
| PECB Certified ISO/IEC 27701 Senior Lead Auditor | Lead Auditor exam or equivalent | Ten years, seven in privacy management | 1,000 hours |
What counts as audit activity
- Planning an audit
- Managing an audit program
- Drafting audit reports
- Drafting nonconformity reports
- Drafting audit working documents
- Reviewing and managing documented information related to the audit
- Conducting on-site audits
- Following up on nonconformities
- Leading an audit team
Activities should follow good implementation, management and audit practice. Your project and audit logs are checked against the hours required.
Frequently asked questions
Buying and enrolling
What is in the PECB ISO/IEC 27701 Lead Implementer + Lead Auditor bundle?
It is the two PECB eLearning courses in one enrollment: Lead Implementer, which teaches you to build and maintain a privacy information management system (PIMS), and Lead Auditor, which teaches you to audit one and lead an audit team. Each course has its own exam. reconn delivers both as a PECB Authorized Titanium Partner and adds two 60-minute 1-on-1 sessions, one per course, and unlimited email and WhatsApp support.
What does the bundle include?
PECB eLearning access on myPECB for both courses, four exam attempts (the first attempt and one free retake for each exam), two PECB certification application fees, two first-year annual maintenance fees, two 60-minute 1-on-1 sessions with a PECB Certified Trainer (one for each course), unlimited email and WhatsApp support until you clear both exams, and same-day enrollment. Both courses are in English.
How much do I save with the bundle?
The bundle is priced below the two courses bought separately, and the buy box on this page shows the bundle price against the original price. The prices shown are in US dollars and final, with VAT included where it applies.
Is this the right page if I want Self-Study, live online or classroom training?
This page sells the English eLearning bundle only. If you want live online sessions for yourself or a team, or classroom training in the Middle East, email hello@reconn.io or message us on WhatsApp and we will arrange it.
When do I get access after I pay?
reconn confirms your enrollment the same day, and you then study through your myPECB account. If you buy outside our working hours, we confirm when the next shift starts. Our hours are 6:00 AM to 10:00 PM Gulf Standard Time (GMT+4), every day including weekends.
How does pricing and VAT work?
The price on this page is in US dollars and checkout is in US dollars only. reconn accounts for the VAT of your country, the price you see is final, and you receive an automated VAT invoice. If your company needs a corporate invoice, email hello@reconn.io before you place the order.
Can I pay in installments?
Qualified buyers in the Middle East can pay in installments through Tabby or Tamara. This is not a checkout option. Contact reconn directly by email at hello@reconn.io or on WhatsApp at +971 5857 26270 and we will set it up.
Is there a discount for veterans or people returning to work?
Yes. reconn offers a career restart discount of up to 10% to military veterans, service members, frontline health workers, people returning after a medical or career break, and people who lost their job and are upskilling. Email hello@reconn.io and say you qualify. We do not ask for proof or for the reason.
The courses and the standard
What is ISO/IEC 27701?
ISO/IEC 27701 is the international standard for a privacy information management system (PIMS). ISO describes it as setting out requirements for establishing, implementing, maintaining and continually improving a PIMS, with guidance on putting those requirements into practice. It is designed for organizations that act as PII controllers or PII processors.
Which edition of ISO/IEC 27701 do the courses follow?
Both courses are based on the 2025 edition of ISO/IEC 27701. ISO published that second edition in October 2025 as an independent management system standard, so it no longer depends on ISO/IEC 27001 as an extension.
Should I take the Lead Implementer, the Lead Auditor, or both?
Take the Lead Implementer if you will build and run a PIMS, and the Lead Auditor if you will audit one. Many privacy and compliance professionals take both, because an implementer who understands how auditors think builds a system that passes, and an auditor who understands implementation asks better questions. The bundle is for them.
Do I have to take the two courses in a particular order?
No. Each course is separate on myPECB and has its own exam. Most learners start with the Lead Implementer because it covers the structure of the PIMS the auditor later checks, but you can start with either.
What do I need to know before I start?
PECB's course pages list a fundamental understanding of information privacy for the Lead Implementer, and a fundamental understanding of information security and privacy plus comprehensive knowledge of audit principles for the Lead Auditor. You do not need implementation or audit experience to enroll or sit the exams. Experience is only needed for the credentials above the Provisional level.
What does each course teach day by day?
PECB organizes each course as five days: four days of content and an exam day. The Lead Implementer covers introduction and initiation, the implementation plan, implementation, and monitoring, improvement and certification audit preparation. The Lead Auditor covers the introduction to the PIMS, audit principles and audit preparation, on-site audit activities, and closing the audit. With eLearning you move through the content at your own pace.
Does the Lead Implementer cover both PII controllers and PII processors?
Yes. Both courses cover the privacy objectives and controls that apply to PII controllers and to PII processors, so you can judge which ones an organization has to meet.
Will these courses make me a certification body auditor?
No. The Lead Auditor course and exam prepare you to audit a PIMS and to lead an audit team, and the PECB credential confirms that. Certification bodies set their own requirements for the auditors they use, so check with the body you want to work with.
Do the credentials certify my organization?
No. PECB credentials certify you as an individual. An organization is certified against ISO/IEC 27701 by a certification body after an audit.
The exams
What do the exams look like?
Each exam has 80 multiple-choice questions with three options each, and you need 70% to pass. They mix stand-alone questions with scenario-based questions, where you read one scenario and answer five questions about it. Each exam takes 3 hours.
Which topics carry the most weight?
In the Lead Implementer exam, implementing a PIMS carries the most, with 23 of the 80 questions (28.75%). In the Lead Auditor exam, conducting an ISO/IEC 27701 audit carries the most, with 20 of the 80 questions (25%).
Are the exams open book?
Yes. PECB allows a hard copy of the ISO/IEC 27701 standard, the training course materials and your own notes from the course. The course materials and notes can be accessed through the PECB Exams app or printed.
How are the exams taken?
Online, through the PECB Exams app. A PECB invigilator supervises you remotely through a camera, you show a valid ID, and secondary devices such as phones and tablets are not allowed. reconn does not run the exams. PECB does.
How many attempts do I get?
Four in total: your first attempt and one free retake for the Lead Implementer exam, and the same for the Lead Auditor exam. Each course comes with its own PECB coupon, valid within 12 months of the date you receive it. PECB has no limit on the number of retakes after that, but it sets waiting periods between them and charges its own fees.
When do I get my result?
Online multiple-choice exams give you the result immediately. If you fail, PECB sends you the list of domains where you performed poorly so you can prepare for a retake.
Do non-native English speakers get extra time?
PECB can give 30 additional minutes on Lead exams to candidates taking the exam in a non-native language, if they ask on the day of the exam.
Certification and maintenance
Which credentials can I earn?
From the Lead Implementer exam: PECB Certified ISO/IEC 27701 Provisional Implementer, Implementer, Lead Implementer and Senior Lead Implementer. From the Lead Auditor exam: Provisional Auditor, Auditor, Lead Auditor and Senior Lead Auditor. The level depends on your professional experience and your project or audit hours.
Do I need experience to become a Lead Implementer or a Lead Auditor?
For either Lead credential PECB asks for five years of professional experience, including two in privacy management, and 300 hours of project activities (implementation) or audit activities (auditing). You can pass the exams without that experience and apply for the Provisional credentials, which have no experience requirement.
How long are the certifications valid, and what does it cost to keep them?
PECB certifications are valid for three years. To maintain one you meet the continuing professional development (CPD) requirements and pay the annual maintenance fee. The first year of the annual maintenance fee is included for both credentials when you enroll through reconn.
How long do I have to finish everything?
PECB sets a 12-month window for eLearning. Within it you take each exam, use your attempts and apply for certification.
Support and training options
What happens in the two 1-on-1 sessions?
You get one 60-minute live session with a PECB Certified Trainer from reconn for each course. Most learners use the Lead Implementer session for scoping, risk assessment and controls, and the Lead Auditor session for audit planning, evidence, nonconformities and exam strategy. You book them after you enroll.
Who is the trainer?
Shenoy Sandeep, founder of reconn and a PECB Certified Trainer, leads the sessions. He also holds the PECB ISO/IEC 27701:2025 Transition certificate. reconn is an applied AI and cybersecurity company based in Dubai, and the team works on privacy, AI governance and security projects alongside training.
What does unlimited email and WhatsApp support cover?
You can message us about the course content, the exam process, your PECB account and your certification applications, until you clear the exams and within 12 months of enrollment. We answer during our working hours, 6:00 AM to 10:00 PM Gulf Standard Time (GMT+4).
Can my team or company take this bundle?
Yes. reconn runs live online batches for teams in any country and classroom batches in the Middle East, and can issue a country-specific tax invoice. Email hello@reconn.io with your team size and location.
Teams, live online and corporate training
This page sells the English eLearning bundle for individuals. If you want something different, we can arrange it.
| You want | What we offer |
|---|---|
| Live online sessions with a trainer | Live online batches for you or your team, from any country, on request |
| Classroom training | Corporate classroom batches in the Middle East |
| A custom batch for your company | Dates, group size and a country-specific tax invoice agreed with you before you order |
| One course only | The Lead Implementer and Lead Auditor courses are each on their own page on reconn.io |