CIPM Certification Preparation: Running a Privacy Program
The CIPM is for people who have to make privacy work day to day, beyond the letter of the law. Over two days we build a privacy program step by step, from governance to incident handling, and prepare for the IAPP exam with realistic scenarios drawn from multinational and regional organizations. You leave with templates and a clear sequence you can adapt to your own organization, whatever its size or sector.
The essentials
Publisher : IAPP
Certification : Certified Information Privacy Manager (CIPM)
Duration : 2 days (14 h)
Level : Intermediate
Formats : Live virtual class · In-person in Casablanca · On-site (intra-company)
Languages : French or English
Exam facts : 90 questions (75 scored + 15 unscored) · 2.5 h · pass mark 300 on a 100–500 scale
Exam voucher: included or optional depending on the package — contact us.
Define the vision, strategy and scope of a privacy program
Set up clear governance: roles, policies, training and awareness
Map personal data and run privacy impact and risk assessments
Select proportionate technical and organizational safeguards
Measure program performance and report to leadership
Handle data subject requests and personal data breaches effectively
Program
Developing a program framework
Mission and objectives
Stakeholders and executive sponsorship
Frameworks and applicable laws
Establishing program governance
Structuring the privacy team
Policies and procedures
Training and awareness
Assessing data
Data inventory and mapping
Privacy impact assessments
Vendor assessments
Protecting personal data
Privacy by design
Security controls
Retention and deletion
Sustaining program performance
Metrics and dashboards
Audits and continuous improvement
Monitoring regulatory change
Responding to requests and incidents
Data subject rights requests
Breach response plan
Notification and communication
Prerequisites
No formal prerequisites for this preparation course
Basic familiarity with a privacy law (GDPR or Morocco's Law 09-08, for example) helps
Target audience
DPOs and privacy managers
Compliance, internal audit and risk managers
CISOs and compliance project leads
Lawyers moving from legal advice into operations
The exam
The CIPM exam is administered by the IAPP. It contains 90 multiple-choice questions, of which 75 count toward your score and 15 are unscored trial items, with 2.5 hours to finish. Results are reported on a 100–500 scale and 300 is the pass mark. The exam is available in English, French, German, Brazilian Portuguese and Simplified Chinese. After a failed attempt, you must wait at least seven days before rebooking. The credential stays active through IAPP membership or the certification maintenance fee, plus the IAPP's continuing education requirements.
Preparation tips
Think like a program manager: the best answer is often the most structured one
Memorize the stages of the operational life cycle
Practice pacing yourself: 90 questions in 150 minutes
Frequently asked questions (FAQ)
How many questions are on the CIPM exam?
There are 90 questions, 75 scored and 15 unscored, in 2.5 hours. You cannot tell which ones are unscored, so give every question the same care.
Is the CIPM available in French?
Yes. The IAPP offers it in French and English, among other languages. We deliver the course in either language.
Do I need the CIPP/E before the CIPM?
No, they are independent. Many professionals start with the CIPP/E for the legal foundation and then move on to the CIPM for implementation.
Is the CIPM tied to a specific law?
No. It covers program management that applies whatever the legal framework, whether the GDPR, Morocco's Law 09-08 or other national rules. That makes it a good fit for teams operating across several jurisdictions at once.
What score do I need?
You need 300 on a 100–500 scale. It is a scaled score rather than a direct percentage, so aim for comfortable margins on practice tests rather than a fixed number of correct answers.