The NIS 2 Directive (Network and Information Security Directive 2) is the second-generation EU directive on network and information security, greatly expanding the scope of application and obligations. This training not only covers cybersecurity, but also incorporates the physical security dimension in combination with the CER Directive (Critical Entities Resilience Directive). The course provides practical guidance to help enterprises establish compliance systems according to international standards such as ISO/IEC 27001, ISO/IEC 27002, ISO/IEC 27005, ISO 31000, ISO/IEC 22301, ISO/IEC 27035, etc. Learners will also understand the extensive supervisory and enforcement powers of competent authorities and their direct impact on management.

• Obtain practical guidance on how to comply with the requirements and obligations of the NIS 2 Directive implemented nationwide
• Understand obligations related to IT risk management, registration and reporting obligations
• Master the role of international standards in implementing NIS 2 requirements

• IT security officers, IT risk managers, business continuity managers, chief information security officers, risk managers, enterprise governance and audit personnel responsible for implementing the NIS 2 Directive, quality managers

• Legal basis and legal background of the NIS 2 Directive
• Motivation and objectives of the NIS 2 Directive
• Requirements and obligations for implementing the NIS 2 Directive
• Risk management measures for information security and business continuity, especially in line with ISO/IEC 27001 and ISO/IEC 27002
• Risk management in an information security management system according to ISO/IEC 27001 (and ISO/IEC 27005, ISO 31000, ISO 31073)
• Implementing a business continuity management system according to ISO/IEC 22301 and managing risks related to business continuity
• Security incident management in line with ISO/IEC 27035
• Establishing procedures for fulfilling reporting and reporting obligations