- ACS Academy
- Flexible Learning, Lasting Success
-
- info@acs-academy.ca
- (604) 924-5506 ext.377
- 318-901 Third Street West, North Vancouver, BC, V7P 3P9
As the holiday season approaches, please note our adjusted front desk office hours:
This course provides comprehensive guidance on ISO/IEC 27018:2019, the international code of practice for the protection of personally identifiable information (PII) in public cloud environments. As an extension to ISO/IEC 27001 and ISO/IEC 27002, ISO 27018 specifically addresses privacy risks for cloud service providers (CSPs) that process PII on behalf of customers. Participants will learn how to implement cloud-specific privacy controls, fulfill legal and contractual obligations, and ensure trust and transparency in cloud-based personal data processing.
By the end of the course, you will be able to:
Understand the structure, purpose, and applicability of ISO/IEC 27018:2019.
Identify and implement PII protection controls in public cloud environments.
Distinguish between ISO 27001, 27002, 27017, and 27018 and their privacy roles.
Define responsibilities between cloud service providers (processors) and customers (controllers).
Implement privacy-by-design and privacy-by-default principles in cloud services.
Ensure lawful processing of personal data in accordance with ISO and applicable regulations (e.g., GDPR).
Manage consent, purpose limitation, access control, and data retention for PII.
Address data breach notification and accountability requirements in cloud environments.
Provide transparency and control to data subjects and customers.
Prepare for privacy and cloud security audits or third-party certifications.
Cloud Compliance and Data Privacy Officers
Information Security Managers and CISOs
Cloud Service Providers (IaaS, PaaS, SaaS)
Legal and Risk Management Professionals
DPOs and GDPR/Privacy Consultants
IT and Cloud Governance Professionals
Familiarity with ISO/IEC 27001 and cloud computing environments is helpful
No prior ISO 27018 experience required
Highly recommended for organizations acting as data processors in public cloud platforms
ISO/IEC 27018 clause interpretation and control application
PII data lifecycle management in cloud settings
Processor-controller obligation mapping
Consent and privacy policy implementation
Data subject rights and transparency measures
Data breach readiness and response
Integration with ISO 27001, ISO 27017, and GDPR
Privacy risk assessment and mitigation
Audit preparation for cloud privacy compliance
This course provides detailed guidance on implementing ISO/IEC 27017:2015, the international standard for information security controls in cloud computing environments. As a security extension to ISO/IEC 27001 and ISO/IEC 27002, this standard offers additional controls and implementation advice specifically for cloud service providers (CSPs) and cloud service customers (CSCs). Participants will learn how to identify cloud-specific risks, implement appropriate controls, and manage shared responsibilities effectively in a cloud environment.
By the end of the course, you will be able to:
Understand the purpose, structure, and scope of ISO/IEC 27017:2015.
Identify the differences and alignment with ISO/IEC 27001 and 27002.
Recognize the shared responsibility model in cloud computing.
Implement the 7 additional controls and 37 enhanced guidelines specific to cloud services.
Address cloud-specific risks including multi-tenancy, virtualization, and legal jurisdiction.
Develop clear roles and responsibilities between CSPs and CSCs.
Manage cloud service agreements, SLAs, and third-party assurance requirements.
Ensure compliance with data privacy, availability, and integrity expectations in the cloud.
Strengthen incident response, backup, and business continuity in cloud-based environments.
Prepare for audits or certifications that require cloud security assurances.
Information Security Managers and CISOs
Cloud Service Providers (IaaS, PaaS, SaaS)
IT Risk and Compliance Officers
Data Privacy and Governance Professionals
Cloud Architects and DevSecOps Teams
Consultants implementing ISO 27001 in cloud environments
Familiarity with cloud computing models and ISO/IEC 27001 is helpful
No prior experience with ISO 27017 is required
Ideal for organizations migrating to or managing cloud-based infrastructure
ISO/IEC 27017 clause interpretation and implementation
Cloud-specific risk identification and control design
CSP/CSC role delineation
Security in virtualization and multitenant environments
Data lifecycle protection in cloud services
Secure configuration and administrative operations
SLA and contractual security alignment
Incident management in cloud infrastructure
Integration with ISO/IEC 27001 and 27002
This practical course equips participants with the skills and methodology to establish, implement, maintain, and continually improve a Business Continuity Management System (BCMS) aligned with ISO 22301:2019 and Amendment 1:2024. You will learn how to perform business impact analyses (BIA), conduct risk assessments, develop continuity and recovery strategies, and manage disruptions effectively. The course highlights the updated guidance from the 2024 amendment and integrates connections to related standards such as ISO 22313 (guidelines for BCMS), ISO 22317 (BIA), and ISO 31000 (risk management). Participants will gain hands-on understanding of resilience planning, crisis management, and testing processes that ensure organizational preparedness.
By the end of this course, you will be able to:
Interpret the principles, clauses, and structure of ISO 22301:2019 and its 2024 amendment.
Conduct a business impact analysis (BIA) and assess continuity risks effectively.
Develop and implement continuity and recovery strategies across key functions.
Establish documented procedures for incident response, communication, and crisis coordination.
Plan and conduct continuity exercises, tests, and management reviews.
Monitor, evaluate, and improve BCMS performance using the PDCA framework.
Prepare for internal and third-party audits and ensure compliance with certification requirements.
Business continuity professionals
Risk managers and analysts
Compliance officers
Security coordinators and emergency planners
Internal auditors
Operations and facility managers
Consultants responsible for organizational resilience and emergency preparedness
Basic understanding of risk or operations management helpful
No previous ISO 22301 experience required
Suitable for any organization seeking resilience improvement
This applied course equips participants with the knowledge and practical skills to develop, implement, and maintain an effective Asset Management System (AMS) aligned with ISO 55001:2014. You’ll learn how to establish an asset management policy, strategy, and objectives that balance performance, cost, and risk throughout the asset lifecycle. The course emphasizes aligning asset management with organizational objectives, integrating risk-based decision-making, and optimizing asset value across sectors such as manufacturing, utilities, transportation, and infrastructure. You will also explore the relationships between ISO 55000 (overview, principles) and ISO 55002 (guidance on application).
By the end of this course, you will be able to:
Explain the purpose, structure, and key clauses of ISO 55001:2014 and its integration with other management systems.
Identify organizational context, stakeholder needs, and asset management objectives.
Develop and implement an asset management policy, strategy, and plan.
Apply risk-based decision-making to asset lifecycle activities—acquisition, operation, maintenance, and disposal.
Monitor asset performance using key indicators, condition assessments, and lifecycle cost analysis.
Conduct internal audits and management reviews to evaluate AMS effectiveness and continual improvement.
Prepare your organization for ISO 55001 certification and ongoing asset optimization.
Maintenance and reliability engineers
Asset and facility managers
Infrastructure and utilities planners
Operations and maintenance supervisors
Risk and finance professionals involved in asset optimization
Internal auditors of management systems
Consultants supporting ISO 55001 implementation or certification
Basic knowledge of operational or maintenance activities is helpful
Useful for organizations managing valuable physical assets
No prior ISO 55001 experience required
This course provides practical training on planning, conducting, and reporting HACCP internal audits in alignment with the Codex HACCP System and ISO 19011 auditing guidelines. Participants learn how to assess prerequisite programs (PRPs), verify Critical Control Points (CCPs), evaluate monitoring records, and identify nonconformities related to food safety hazards. The course also includes root cause analysis, corrective action follow-up, and audit communication skills necessary for maintaining and improving an effective Food Safety Management System (FSMS). Through real case scenarios and auditing exercises, trainees gain the competence to perform internal audits that ensure compliance, prevent food safety risks, and support regulatory and customer requirements.
ACS Academy is a federally registered Canadian provider of training and consulting services, offering accredited certificate programs, industry-focused training, and support for management systems and international standards. Backed by experienced professionals with hands-on expertise, ACS Academy delivers practical, high-quality solutions that help organizations achieve compliance, operational excellence, and sustainable growth across industries.