What the Course Includes
Our NIS2 e-learning course is tailored to make the complex requirements of the NIS2 regulatory framework both understandable and practical to apply.
The course materials are designed to be completed in approximately one hour and consist of preparato-ry reading and practical, bite-sized e-lessons that guide you step by step through the process of securing your organisation and meeting the requirements arising from NIS2.
We also offer the option for one of our cybersecurity experts to come to your company and provide in-person training for your organisation’s management.
The course material has been developed with a focus on a practical and legally relevant understanding of the requirements relating to the responsibilities of the management body. As a result, after completing the course, you will be better equipped to take informed and documented decisions at board and executive level and to demonstrate active and compliant management involvement in your organisation’s cybersecurity efforts.
Course materials and in-person training are offered in both Danish and English.
Understand the fundamental principles of cybersecurity
We take you through who is covered by NIS2 and which parts of your organisation NIS2 is directed at. We also go over the key concepts you need to know to understand what NIS2 protects against, and finally we look at when your security is appropriate and proportionate in relation to the requirements that NIS2 sets, so that you are equipped to minimise risk and achieve compliance.
The role of the management
We cover the NIS2 obligations aimed at the organisation’s management body, including that management must approve and implement measures and oversee its implementation. We also look at how it is a requirement that management undertakes relevant training on managing cybersecurity risks and encourages similar training to be offered to the organisation’s other employees.
Supply chain security
We take a look at supply chain security, since NIS2 entities must not only focus on their own systems and organisation, but also have an overview of the risks that may arise in the NIS2 entity’s supply chain and how such risks can be managed.
Incident management
We take a closer look at the rules applicable to notification following a significant cybersecurity incident. This includes an examination of both when an incident should be considered significant and which notification deadlines apply under the NIS2 Act when an organisation is affected by such an incident.
Assessing and improving security
We address how you should assess the effectiveness of the organisation’s implemented cybersecurity measures, as well as what the organisation can do - and how - when improvements to the existing measures need to be implemented.
Supervision and enforcement
We provide an overview of the sanctions you may face if you fail to comply with the requirements set out in the NIS2 Act. This includes both the applicable fine ranges and the specific enforcement measures that apply to entities classified as essential under the Act.
