As the holiday season approaches, please note our adjusted front desk office hours:
This course provides comprehensive guidance on ISO/IEC 27018:2019, the international code of practice for the protection of personally identifiable information (PII) in public cloud environments. As an extension to ISO/IEC 27001 and ISO/IEC 27002, ISO 27018 specifically addresses privacy risks for cloud service providers (CSPs) that process PII on behalf of customers. Participants will learn how to implement cloud-specific privacy controls, fulfill legal and contractual obligations, and ensure trust and transparency in cloud-based personal data processing.
By the end of the course, you will be able to:
Understand the structure, purpose, and applicability of ISO/IEC 27018:2019.
Identify and implement PII protection controls in public cloud environments.
Distinguish between ISO 27001, 27002, 27017, and 27018 and their privacy roles.
Define responsibilities between cloud service providers (processors) and customers (controllers).
Implement privacy-by-design and privacy-by-default principles in cloud services.
Ensure lawful processing of personal data in accordance with ISO and applicable regulations (e.g., GDPR).
Manage consent, purpose limitation, access control, and data retention for PII.
Address data breach notification and accountability requirements in cloud environments.
Provide transparency and control to data subjects and customers.
Prepare for privacy and cloud security audits or third-party certifications.
Cloud Compliance and Data Privacy Officers
Information Security Managers and CISOs
Cloud Service Providers (IaaS, PaaS, SaaS)
Legal and Risk Management Professionals
DPOs and GDPR/Privacy Consultants
IT and Cloud Governance Professionals
Familiarity with ISO/IEC 27001 and cloud computing environments is helpful
No prior ISO 27018 experience required
Highly recommended for organizations acting as data processors in public cloud platforms
ISO/IEC 27018 clause interpretation and control application
PII data lifecycle management in cloud settings
Processor-controller obligation mapping
Consent and privacy policy implementation
Data subject rights and transparency measures
Data breach readiness and response
Integration with ISO 27001, ISO 27017, and GDPR
Privacy risk assessment and mitigation
Audit preparation for cloud privacy compliance
This course provides detailed guidance on implementing ISO/IEC 27017:2015, the international standard for information security controls in cloud computing environments. As a security extension to ISO/IEC 27001 and ISO/IEC 27002, this standard offers additional controls and implementation advice specifically for cloud service providers (CSPs) and cloud service customers (CSCs). Participants will learn how to identify cloud-specific risks, implement appropriate controls, and manage shared responsibilities effectively in a cloud environment.
By the end of the course, you will be able to:
Understand the purpose, structure, and scope of ISO/IEC 27017:2015.
Identify the differences and alignment with ISO/IEC 27001 and 27002.
Recognize the shared responsibility model in cloud computing.
Implement the 7 additional controls and 37 enhanced guidelines specific to cloud services.
Address cloud-specific risks including multi-tenancy, virtualization, and legal jurisdiction.
Develop clear roles and responsibilities between CSPs and CSCs.
Manage cloud service agreements, SLAs, and third-party assurance requirements.
Ensure compliance with data privacy, availability, and integrity expectations in the cloud.
Strengthen incident response, backup, and business continuity in cloud-based environments.
Prepare for audits or certifications that require cloud security assurances.
Information Security Managers and CISOs
Cloud Service Providers (IaaS, PaaS, SaaS)
IT Risk and Compliance Officers
Data Privacy and Governance Professionals
Cloud Architects and DevSecOps Teams
Consultants implementing ISO 27001 in cloud environments
Familiarity with cloud computing models and ISO/IEC 27001 is helpful
No prior experience with ISO 27017 is required
Ideal for organizations migrating to or managing cloud-based infrastructure
ISO/IEC 27017 clause interpretation and implementation
Cloud-specific risk identification and control design
CSP/CSC role delineation
Security in virtualization and multitenant environments
Data lifecycle protection in cloud services
Secure configuration and administrative operations
SLA and contractual security alignment
Incident management in cloud infrastructure
Integration with ISO/IEC 27001 and 27002
This course provides a detailed guide to implementing ISO 10668:2010, the international standard for the monetary valuation of brands. It introduces participants to the key requirements, frameworks, and methodologies for brand valuation, focusing on three core perspectives: legal, behavioral, and financial. Participants will learn how to apply consistent, transparent, and defensible methods for assessing brand value that are essential for mergers, acquisitions, licensing, financial reporting, and strategic decision-making.
By the end of the course, you will be able to:
Understand the scope, structure, and objectives of ISO 10668:2010.
Identify the legal, behavioral, and financial components of brand valuation.
Choose appropriate brand valuation approaches: income, market, or cost-based.
Apply consistent and transparent valuation methodologies based on best practices.
Evaluate brand strength through stakeholder perception and behavioral data.
Integrate brand valuation into financial reporting, IP management, and strategy.
Use valuation results to support brand licensing, investment, and M&A activities.
Ensure compliance with audit and legal expectations for intangible assets.
Document the brand valuation process for governance and transparency.
Develop a roadmap for establishing brand valuation processes aligned with ISO 10668.
Brand Managers and Marketing Directors
CFOs, Financial Analysts, and Valuation Experts
Intellectual Property (IP) Managers
M&A and Corporate Strategy Teams
Legal Advisors and Compliance Officers
Consultants in brand, finance, and intangible asset valuation
Basic understanding of financial reporting or brand management is helpful
No prior experience with brand valuation or ISO 10668 is required
Useful for organizations managing high-value or trademarked brands
This course provides practical, step-by-step guidance on implementing ISO 10004:2018, the international standard for monitoring and measuring customer satisfaction. Participants learn to design structured methods for collecting, analyzing, and interpreting customer feedback through surveys, interviews, digital tools, and operational data. The training explains how to define customer satisfaction metrics, identify satisfaction drivers, monitor performance trends, and integrate insights into organizational decision-making. The course also covers alignment with ISO 9001 and ISO 10002 to build a comprehensive customer-focused management system. By the end, trainees will be able to build, improve, and maintain an effective customer satisfaction measurement framework.
By the end of the course, you will be able to:
Understand the purpose, scope, and key concepts of ISO 10004:2018.
Identify customer satisfaction drivers and define relevant metrics.
Design a customer satisfaction monitoring framework.
Select appropriate data sources and feedback collection methods (e.g., surveys, interviews, digital tools).
Analyze customer satisfaction data using both qualitative and quantitative methods.
Align satisfaction monitoring with quality and business objectives.
Use indicators and trends to improve services, products, and processes.
Integrate ISO 10004 practices into ISO 9001 or ISO 10002 systems.
Communicate insights effectively across teams and departments.
Develop a continuous improvement loop based on customer satisfaction data.
Customer Experience and Customer Service Managers
Quality Managers and ISO 9001 Practitioners
Marketing, CRM, and Business Intelligence Analysts
Compliance and Operations Managers
Product and Service Development Teams
Consultants in quality, customer engagement, and process improvement
Basic understanding of customer service or quality systems is helpful
No prior knowledge of ISO 10004 required
Valuable for any organization seeking to enhance customer satisfaction
This course equips participants with the knowledge and tools to design, implement, and maintain a Road Traffic Safety (RTS) Management System in accordance with ISO 39001:2012. You’ll learn how to identify road safety risks, set measurable RTS objectives, and apply a data-driven approach to reduce deaths and serious injuries caused by road traffic incidents. The course emphasizes system integration, risk-based thinking, and continual improvement, linking ISO 39001 to related frameworks such as ISO 9001 (quality), ISO 45001 (occupational health and safety), and ISO 14001 (environmental management).
By the end of this course, you will be able to:
Understand the structure, intent, and key clauses of ISO 39001:2012.
Identify RTS risks, road user behaviours, and external factors influencing traffic safety performance.
Develop and implement a Road Traffic Safety policy aligned with organizational strategy.
Set, monitor, and evaluate RTS objectives and key performance indicators (KPIs).
Manage operational controls for vehicles, drivers, routes, and journeys to prevent accidents.
Conduct RTS performance evaluations, internal audits, and management reviews.
Promote a culture of road safety and continual improvement across the organization.
Health and safety managers
Fleet and transport supervisors
Logistics and supply chain managers
Traffic safety officers and coordinators
Risk management and compliance professionals
ISO consultants and internal auditors
Government and public sector representatives involved in road transport safety
Basic knowledge of safety or risk management
Experience in transport or fleet operations helpful
No prior ISO 39001 experience required
This practitioner course turns ISO/IEC 42001 into a practical blueprint for establishing, implementing, maintaining, and improving an Artificial Intelligence Management System (AIMS). We link strategy and policy to clear governance, roles, and accountability for AI products and services. You’ll learn to scope your AIMS, identify stakeholders, and run risk/impact assessments that address safety, bias/fairness, privacy, security, and explainability. We translate lifecycle controls into day-to-day practices: data management, model design and testing, validation, deployment, monitoring, incident/change management, and decommissioning. The course covers documentation and traceability, transparency measures, human oversight, supplier/third-party model management, and metrics for performance and harm reduction. You’ll prepare audit-ready evidence, internal audit plans, and management review inputs that drive continual improvement and align with broader IMS or ESG commitments. Jurisdictional notes highlight privacy, accessibility, and sector-specific regulations relevant to your context. Designed for organizations that develop or use AI, from startups to the enterprise and public sector.
Translate ISO/IEC 42001 into an AIMS roadmap
Define scope, policy, roles, and governance structure
Run AI risk/impact assessments (bias, safety, privacy, security)
Implement lifecycle controls: data, design, testing, deployment, change
Establish monitoring, incident response, and model drift management
Manage third-party models, data providers, and contracts
Design transparency, human oversight, and recordkeeping
Prepare for internal audits, management reviews, and improvement
AI/ML leaders, product owners, and data science managers
Risk, compliance, privacy, and information security teams
Quality/IMS managers integrating AI governance
Engineering and platform (MLOps) leaders
Executives accountable for AI strategy and ethics
Basic ISO/PDCA or governance/risk knowledge
Familiarity with AI/ML concepts and data pipelines
Awareness of privacy/security frameworks (helpful)
Experience with software lifecycle or vendor management (helpful)
ACS Canada Academy can arrange this course for individuals,
corporate teams, manufacturers, sustainability professionals,
and organizations seeking practical training in
Environmental Product Declarations (EPDs).
Convenient online delivery for participants who prefer
flexible access and remote learning.
Live training with an experienced instructor,
scheduled around your organization’s preferred dates
and number of participants.
✓ Flexible Scheduling
✓ Corporate Group Options
✓ Practical EPD Training
✓ Customized Dates
Interested in arranging this course?
Click below and a prepared email will open with a few short questions.
Simply complete your answers and send it to our training team.
Email:
info@acs-academy.ca
Our training team reviews your participant numbers,
objectives, and preferred dates.
We confirm instructor availability and the most suitable
delivery option.
You receive the proposed course arrangement,
schedule, and applicable quotation.