Download the certification brochure (Spanish): Click here

Exam Details

• Exam Name: ISO/IEC 27701:2025 Lead Auditor Certified (27701-LA)
• Exam Format: Multiple choice, online with remote supervision (proctoring)
• Exam Delivery: Safe Exam Browser
• Number of Questions: 75 questions: 75% scenarios / 25% conceptual
• Exam Duration: 120 minutes
• Passing Score: 70% (53 out of 75 correct answers)
• Available Languages: Spanish / English
• Attempts: Maximum 2 attempts (minimum 30 days between attempts)
• Validity: 3 years · 20 CPD credits per year

Main Subjects

• Audit, leadership and data protection fundamentals (10%): ISO 19011 applied to team leadership; First-, second- and third-party audits; Leadership and communication in the audit; PIMS maturity.
• Audit program and team leadership (15%): Risk-based annual program; Independent and competent team; Roles: lead, technical experts, observers and specialists; Conflicts, pressure and mentoring auditors.
• Planning and preparing led audits (15%): Review of the policy, SoA and PIA/DPIA; Checklists and audit plan; Audit risks; On-site, remote and hybrid logistics and sampling.
• Leading the audit: clauses 4 to 10 (25%): Context, leadership and planning; Support, operation and data service providers; Performance evaluation and improvement; Disputed findings, lack of cooperation and fraud.
• Advanced evaluation of privacy controls (15%): Annex A controls and Annex B guidance; Data subject rights, retention and transfers; Statement of Applicability and control effectiveness.
• Reporting, certification decisions and follow-up (12%): Major NC, minor NC, observation and opportunity for improvement; Final report and closing meeting; Recommending certification, suspension or non-certification; Appeals and follow-up.
• Integrated auditing, regulation and risk (8%): Integration with ISO/IEC 27001, ISO 9001, ISO 22301 and ISO/IEC 42001; GDPR, LGPD, CCPA and the NIST Privacy Framework; Risk management with ISO 31000.

Who is this certification for?

• Management system lead auditors: Who want to extend their certification scope to data protection.
• Compliance directors (DPO, CCO): Who lead regulatory conformity assessments of privacy systems.
• Senior data protection consultants: Who carry out certification audits and advanced PIMS diagnostics.
• Internal audit directors: Who integrate privacy reviews into the overall assurance program.
• Privacy risk leads: Who lead the assessment of risks and the effectiveness of PIMS controls.

Prerequisites

Mandatory: ISO/IEC 27701:2025 Implementer Certified (27701-IC) and ISO/IEC 27701:2025 Internal Auditor Certified (27701-IAE). 27701-LA is the highest level of the CertJoin ISO/IEC 27701 path.