Overview
The CDPSE certification from ISACA is the gold standard for IT professionals who implement privacy solutions. This course is ideal for those who want to bridge the gap between privacy governance and technology, ensuring that data privacy is embedded into IT systems, business processes, and product design.​
​
The CDPSE credential focuses on real-world technical implementation, not just theory. If you're responsible for building or supporting secure systems that meet global privacy requirements, this course will give you the tools to do it confidently.
Master the intersection of privacy and technology—turn compliance requirements into a technical reality.
Prerequisites
This course is designed for:​
​
-
IT professionals, system engineers, and developers
-
Privacy technologists and cybersecurity practitioners
-
Compliance and risk professionals working in tech-driven environments
-
Those preparing for the ISACA CDPSE exam
​
Prior knowledge of privacy principles, information systems, or IT infrastructure is helpful but not mandatory. No legal background is required.
Learning Outcomes
By the end of this course, you will:
✅ Design and implement privacy-by-design technical solutions
✅ Align IT practices with regulatory privacy frameworks (GDPR, CCPA, etc.)
✅ Conduct data risk assessments and support secure data lifecycle management
✅ Build tools and infrastructure that support privacy rights and compliance
✅ Be exam-ready for CDPSE—and project-ready to apply what you learn
Course Outline
Module 1: Privacy Governance (20%)​
​
-
Personal Information: Understanding types and classifications of personal data.
-
Privacy Principles: Applying concepts like Privacy by Design, consent, and transparency.
-
Privacy Laws and Regulations: Comprehending global privacy laws and their applications.
-
Privacy Documentation: Developing policies, guidelines, and procedures for privacy management.
​
Module 2: Privacy Risk Management and Compliance (18%)​
​
-
Organizational Culture and Structure: Establishing roles and responsibilities for privacy.
-
Vendor and Supply Chain Management: Assessing and managing third-party privacy risks.
-
Incident Management: Preparing for and responding to privacy incidents.
-
Data Subject Rights and Requests: Handling requests related to data access, correction, and deletion.
​
Module 3: Data Life Cycle Management (23%)​
​
-
Data Inventory and Mapping: Identifying and documenting data flows.
-
Data Classification: Categorizing data based on sensitivity and regulatory requirements.
-
Data Retention and Disposal: Implementing policies for data storage duration and secure deletion.
-
Data Quality and Integrity: Ensuring accuracy and reliability of data throughout its lifecycle.​
​
Module 4: Privacy Engineering (39%)​
​
-
Privacy Requirements and Controls: Integrating privacy controls into system designs.
-
Secure System Development: Applying secure coding practices and privacy-enhancing technologies.
-
Testing and Validation: Conducting assessments to verify privacy controls.
-
Monitoring and Maintenance: Continuously overseeing systems to ensure ongoing privacy compliance.
