Course Overview
The CDPSE certification validates privacy technologists’ ability to implement privacy by design solutions into new and existing networks, platforms and products, building customer and stakeholder trust and mitigating risks of noncompliance.
Who Should Attend?
IT Professionals who implement first line of defense in data breaches and provide technical privacy solutions including:
- Lead Software Engineer Data and System Privacy
- Domain Architect (Legal Care Compliance, Privacy)
- Security and Privacy Engineer
- Privacy Solutions Architect
- IT Project Manager
- Privacy Data Scientist
- Privacy Analyst
- Lead Privacy Manager
CDPSE Training Outline
Domain 1: Privacy Governance
- Governance
- Personal Data and Information
- Privacy Laws and Standards across Jurisdictions
- Privacy Documentation
- Legal Purpose, Consent and Legitimate Interest
- Data Subject Rights Management
- Roles and Responsibilities Related to Data
- Privacy Training and Awareness
- Vendor and Third-party Management
- Audit Process
- Privacy Incident Management
- Risk Management
- Risk Management Process
Domain 2: Privacy Architecture
- Infrastructure
- Cloud Computing
- Remote Access
- Endpoints
- System Hardening
- Secure Development Life Cycle
- Applications and Software
- Application and Software Hardening
- APIs and Services
- Tracking Technologies
- Technical Privacy Controls
- Communication and Transport Protocols
- Encryption, Hashing and De-identification
- Key Management
- Encryption, Hashing and De-identification
- Monitoring and Logging
- Identity and Access Management
Domain 3: Data Lifecycle
- Data Purpose
- Inventory and Classification
- Data Quality
- Flow and Usage Diagrams
- Use Limitation
- Analytics
- Data Persistence
- Data Minimization
- Migration
- Storage
- Warehousing
- Retention and Archiving
- Data Destruction
Prerequisites:
To apply for the Certified Data Privacy Solutions Engineer (CDPSE) certification from ISACA, you need three years of experience in the following areas:
- Privacy governance: This includes management, risk management, and governance
- Privacy architecture: This includes technical privacy controls, infrastructure, and applications/software
- Data lifecycle: This includes data purpose and data persistence
