ISACA Data Privacy Solutions Engineer (CDPSE) Exam Syllabus

• Personal Information
• Privacy Principles (e.g., Privacy by Design, Consent, Transparency)
• Privacy Laws and Regulations
• Privacy Documentation (e.g., Policies, Guidelines)

B. PRIVACY OPERATIONS

• Organizational Culture, Structure, and Responsibilities
• Vendor and Supply Chain Management
• Incident Management
• Data Subject Rights, Requests, and Notification

• Risk Management Process and Policies
• Privacy-Focused Assessment (e.g., Privacy Impact Assessment (PIA))
• Privacy Training and Awareness
• Threats and Vulnerabilities
• Risk Response

B. COMPLIANCE

• Privacy Frameworks
• Evidence and Artifacts
• Program Monitoring and Metrics

• Data Inventory, Dataflow Diagram, and Classification
• Data Quality (e.g. Accuracy)
• Data Use Limitation
• Data Analytics (e.g., Aggregation, AI, Data Warehouse)

B. DATA PERSISTENCE AND DESTRUCTION

• Data Minimization
• Data Disclosure and Transfer
• Data Storage, Retention, and Archiving
• Data Destruction

• Infrastructure and Platform Technology (e.g., legacy, cloud computing)
• Devices and Endpoints
• Connectivity
• Secure Development Life Cycle
• APIs and Cloud-Native Services

B. PRIVACY RELATED SECURITY CONTROLS

• Asset Management
• Identity and Access Management
• Patch Management and Hardening
• Communication and Transport Protocols
• Encryption and Hashing
• Monitoring and Logging

C. PRIVACY CONTROLS

• Consent Tagging
• Tracking Technologies (e.g., cookie management)
• Anonymization and Pseudonymization
• Privacy Enhancing Technologies (PETs)
• AI/Machine Learning (ML) Considerations