CDPSE Preparation Course

CDPSE Preparation Course Modules

Module 1: Privacy Governance

Section A: Governance

• Module 1: Personal Data and Information
• Module 2: Privacy Laws and Standards Across Jurisdictions
• Module 3: Privacy Documentation (Policies, Guidelines and more)
• Module 4: Legal Purpose, Consent, and Legitimate Interest
• Module 5: Data Subject Rights

Section B: Management

• Module 1: Roles and Responsibilities Related to Data
• Module 2: Privacy Training and Awareness
• Module 3: Vendor and Third-Party Management
• Module 4: Audit Process
• Module 5: Privacy Incident Management

Section C: Risk Management

• Module 1: Risk Management Process
• Module 2: Privacy Impact Assessment (PIA)
• Module 3: Threats, Attacks and Vulnerabilities Related to Privacy

Module 2: Privacy Architecture

Section A: Infrastructure

• Module 1: Technology Stacks
• Module 2: Cloud-based Services
• Module 3: Endpoints
• Module 4: Remote Access
• Module 5: System Hardening

Section B: Applications and Software

• Module 1: Secure Development Lifecycle (e.g., Privacy by Design)
• Module 2: Applications and Software Hardening
• Module 3: APIs and Services
• Module 4: Tracking Technologies

Section C: Technical Privacy Controls

• Module 1: Communication and Transport Protocols
• Module 2: Encryption, Hashing and De-identification
• Module 3: Key Management
• Module 4: Monitoring and Logging
• Module 5: Identity and Access Management

Module 3: Data Cycle

Section A: Data Purpose

• Module 1: Data Inventory and Classification (e.g., Tagging, Tracking, SOR)
• Module 2: Data Quality and Accuracy
• Module 3: Dataflow and Usage Diagrams
• Module 4: Data Use Limitation
• Module 5: Data Analytics (e.g., Aggregation, AI, Machine Learning, Big Data)

Section B: Data Persistence

• Module 1: Data Minimisation (e.g., De-identification, Anonymisation)
• Module 2: Data Migration
• Module 3: Data Storage
• Module 4: Data Warehousing (e.g., Data Lake)
• Module 5: Data Retention and Archiving
• Module 6: Data Destruction

Practice Exam

On the last course day, you will take an extensive practice exam. This will help you familiarise yourself with the exam format, identify your strenghts and weaknesses, and improve your exam technique. The practice exam session is followed by evaluation and interactive discussion. This will give you the opportunity to assess how ready you are to take your official ISACA CDPSE certification exam and what potential knowledge gaps you may need to fill to excel at your exam.

ISACA CDPSE Certification Exam

The CDPSE® certification exam is conducted by ISACA® and is not included in this course. You need to schedule your exam directly with ISACA®. Upon registration, you will have a 12-month eligibility period to take your exam (including second attempts). Upon successful completion of the CDPSE exam, you can apply for your ISACA CDPSE® certification title. Note that in addition to passing the exam, you need to have at least three years of experience in data privacy governance, privacy architecture and/or data lifecycle work to earn your ISACA CDPSE® certificate.

The CDPSE exam requires in-depth theoretical knowledge. In addition to attending the training, you will need to invest a good portion of your time in self-study to excel at your exam. The recommended self-study time is a minimum. You may need significantly more self-study time depending on your personal situation.

Exam information:

• 3,5 hours (210 minutes)
• 120 multiple-choice questions