ISACA - CDPSE (Certified Data Privacy Security Engineer)

Curriculum

Domain 1: Privacy Governance

Section A: Governance

• Module 1: Personal Data and Information
• Module 2: Privacy Laws and Standards across Jurisdictions
• Module 3: Privacy Documentation (e.g., Policies, Guidelines)
• Module 4: Legal Purpose, Consent, and Legitimate Interest
• Module 5: Data Subject Rights

Section B: Management

• Module 1: Roles and Responsibilities related to Data
• Module 2: Privacy Training and Awareness
• Module 3: Vendor and Third-Party Management
• Module 4: Audit Process
• Module 5: Privacy Incident Management

Section C: Risk Management

• Module 1: Risk Management Process
• Module 2: Privacy Impact Assessment (PIA)
• Module 3: Threats, Attacks, and Vulnerabilities related to Privacy

Domain 2: Privacy Architecture (36%)

Section A: Infrastructure

• Module 1: Technology Stacks
• Module 2: Cloud-based Services
• Module 3: Endpoints
• Module 4: Remote Access
• Module 5: System Hardening

Section B: Applications and Software

• Module 1: Secure Development Lifecycle (e.g., Privacy by Design)
• Module 2: Applications and Software Hardening
• Module 3: APIs and Services
• Module 4: Tracking Technologies

Section C: Technical Privacy Controls

• Module 1: Communication and Transport Protocols
• Module 2: Encryption, Hashing, and De-identification
• Module 3: Key Management
• Module 4: Monitoring and Logging
• Module 5: Identity and Access Management

Domain 3: Data Cycle

Section A: Data Purpose

• Module 1: Data Inventory and Classification (e.g., Tagging, Tracking, SOR)
• Module 2: Data Quality and Accuracy
• Module 3: Dataflow and Usage Diagrams
• Module 4: Data Use Limitation
• Module 5: Data Analytics (e.g., Aggregation, AI, Machine Learning, Big Data)

Section B: Data Persistence

• Module 1: Data Minimisation (e.g., De-identification, Anonymisation)
• Module 2: Data Migration
• Module 3: Data Storage
• Module 4: Data Warehousing (e.g., Data Lake)
• Module 5: Data Retention and Archiving
• Module 6: Data Destruction