What you will cover
Four questions the day answers
The session is structured, not a lecture. Each block ends with a piece of your own plan written down.
Where you are starting from
Position your programme against a framework rather than a feeling, whether you have five years of controls or a blank page.
A sequenced roadmap
Turn ISO/IEC 27701 requirements into a three to five year sequence, with what has to exist by when.
Governance you can report on
Structure oversight on the NIST Privacy Framework functions so progress can be reported function by function.
The case it has to survive
Build the business case and the board paper, because a plan nobody funds is not a plan.
Built in keeping with
ISO/IEC 27701:2025
The current edition, now a standalone privacy information management standard rather than an extension to ISO/IEC 27001.
And
The NIST Privacy Framework
Used to structure governance and reporting around its core functions.
Please note
Not a certification course
X-AIL is not an accredited training provider or a certifying body. This day builds your plan; it does not award a credential.
YOUR TRAINER
Owen Duckie
Owen Duckie
CIPM, MSC. (DISTINCTION) · SENOR CONSULTANT
Owen leads X-AIL's privacy, data protection and AI governance work across the Caribbean. He writes the firm's analysis on the gap between data protection compliance and AI governance in the region, including The Missing Middle, and he designed and delivers this session.
He works with organisations that are compliant with everything existing law requires and are now exposed on everything it did not anticipate.