Course Outline
Module 1 – Introduction to the NIS 2 Directive
-
Overview of EU cybersecurity legislation
-
Objectives and principles of the NIS 2 Directive
-
Scope and applicability
-
Essential and important entities
-
Fundamental concepts and terminology
-
Regulatory framework
Module 2 – Planning the Implementation of NIS 2 Requirements
-
Establishing the implementation program
-
Defining implementation scope
-
Understanding organizational context
-
Stakeholder identification and engagement
-
Gap assessment
-
Developing an implementation roadmap
Module 3 – Cybersecurity Governance and Risk Management
-
Governance framework
-
Roles and responsibilities
-
Cybersecurity policies
-
Risk assessment methodology
-
Risk treatment planning
-
Supply chain and third-party security
Module 4 – Cybersecurity Controls and Incident Management
-
Technical and organizational security measures
-
Identity and access management
-
Vulnerability management
-
Business continuity and disaster recovery
-
Incident detection and response
-
Crisis management and regulatory reporting
Module 5 – Communication and Awareness
-
Developing cybersecurity awareness programs
-
Internal and external communication
-
Security culture
-
Training and competency management
-
Executive engagement
-
Documentation and reporting
Module 6 – Testing, Monitoring, and Continuous Improvement
-
Monitoring cybersecurity performance
-
Security metrics and KPIs
-
Internal reviews
-
Corrective actions
-
Management review
-
Continuous improvement of the cybersecurity program
Module 7 – Certification Preparation
-
Review of key concepts
-
Examination domains
-
Practical implementation scenarios
-
Sample questions and discussion
-
Examination preparation guidance
Training Methodology
This course combines instructor-led presentations, practical exercises, implementation scenarios, case studies, quizzes, and interactive discussions to help participants develop the knowledge and practical skills required to implement and manage a cybersecurity program aligned with the NIS 2 Directive and prepare for the official PECB certification examination.
Requirements
Participants should have a fundamental understanding of cybersecurity concepts, information security management, and risk management principles. Previous knowledge of cybersecurity frameworks or regulatory compliance is recommended.
Testimonials (3)
The trainer was helpful..
Attila - Lifial
Course - Compliance and the Management of Compliance Risk
The report and rules setup.
Jack - CFNOC- DND
Course - Micro Focus ArcSight ESM Advanced
The way to receive the information from the trainer