Manager Training

NIS2 Manager Training

Equip your management team with the knowledge required to fulfill its cybersecurity responsibilities.

NIS2 Begins at Board Level

Under NIS2, cybersecurity is no longer just an IT issue. It is a board-level responsibility. Article 20(1) requires management bodies to oversee cybersecurity risk-management measures, while Article 20(2) requires them to complete training so they can understand their obligations and assess cyber risk appropriately.

For organisations within the scope of NIS2, management training is not optional. It forms part of responsible governance in practice. Our NIS2 manager training is designed to help executives and senior decision-makers meet that expectation and establish a sound basis for ongoing compliance.

Programme Overview

Our NIS2 manager training combines self-paced online learning with a live session led by experienced specialists. The programme is structured to take participants from regulatory understanding to confident decision-making, with a clear emphasis on the role of leadership in NIS2 compliance.

It goes beyond a summary of the legal framework. Participants work through the practical issues that arise at management level: the extent of executive involvement required, the implementation and oversight of risk-management measures, and the order in which reporting and decision-making should proceed when an incident occurs. The objective is to frame NIS2 as a matter for leadership, rather than something left to the IT function alone.

The training is intended for board members, managing directors and other senior leaders with formal responsibility for the organisation. It is equally relevant for management teams involved in cyber governance, budget approval and strategic decision-making.

Part 1 Online Course

Participants begin with a series of video-based modules in the online academy. The format is flexible and can be completed around existing commitments. Short quizzes at the end of each module help reinforce the principal points and confirm understanding.

Duration: approx. 2 hours

Part 2 Executive Simulation

The programme concludes with a follow-up session led by experienced information security specialists. Delivered either online or in person, this session uses realistic scenarios and practical guidance to help participants apply what they have learned in an executive decision-making context.

Duration: approx. 2 hours

If you would like to discuss scope, format or rollout options, please get in touch.

Get in Touch

Training Content

The training presents NIS2 as a management matter requiring implementation, oversight and continued involvement at leadership level. It is designed to support more effective internal discussions and to clarify priorities, reporting lines and the next practical steps towards compliance.

Part 1: Online Course

Duration: approx. 2 hours

This section provides leadership teams with a structured understanding of the principal topics they need to address under NIS2.

  • Fundamentals of NIS2
  • Management duties and accountability
  • Principles of risk analysis
  • Minimum security measures required under Article 21
  • Reporting and notification obligations
  • Incident response and recovery
  • Governance and evidence management: implementation, documentation, and effectiveness
  • Registration requirements, national implementation and multi-country operating models
  • Management liability, training obligations and potential sanctions

Part 2: Executive Simulation

Duration: approx. 2 hours

Participants work through an incident-based scenario to practise executive decision-making, escalation and response.

  • Guided incident simulation
  • Practical application of all topics covered in Part 1

Planning a Training Rollout?

We can tailor the training format and delivery approach to reflect your organisation’s structure, maturity and current stage of NIS2 preparation.

We also support related cybersecurity initiatives, including group-wide training, cross-border briefing sessions and targeted seminars for specific stakeholder groups.

Get in Touch