SC175: NIS2 Lead Implementer (DEKRA™ LIN)

Agenda:

• Fundamentals of NIS2 & Regulatory Framework
  • Introduction to the NIS2 Directive: Scope, Objectives, Innovations
  • Roles and Duties of Entities and Management
  • Essential vs. Important Entities: Criteria and Requirements
  • Overview of National and European Supervisory Structures
  • Conducting a NIS2 Gap Analysis
  • Introduction to ENISA ECSF and Role Profiles
    
    
• Risk-Based Planning & Governance Structures
  • Methods for Risk Assessment and Prioritization
  • Business Impact Analysis & Determination of Protection Needs
  • Governance and Management Obligations under NIS2
  • Building a Cybersecurity Governance Program
  • In-Depth: CISO Role – Tasks, Competencies, Implementation
  • Practical Exercise: Developing a Governance Framework
    
    
• Security Measures & Technical Implementation
  • Technical and Organizational Measures (Art. 21)
  • Secure Architectures & Security by Design (Focus: Architect)
  • Secure Software Development and Cloud Security
  • Supply Chain and Third-Party Security (Art. 21 Sec. 2d)
  • Alignment with ISO/IEC 27001 Annex A
  • In-Depth: Architect Role – Planning & Hardening
    
    
• Detection, Response & Incident Management
  • Planning Incident Detection and Response (Art. 23)
  • Reporting Obligations and Deadlines (Art. 30)
  • Establishing a SOC/CSIRT or Reporting Process
  • In-Depth: Cyber Incident Responder – Tasks and Tools
  • Case Study: Coordinated Response to a Cyber Incident
  • Documentation, Forensics & Lessons Learned
    
    
• Audit, Awareness & Continuous Improvement
  • Awareness and Training Programs (Art. 20)
  • Internal Control Mechanisms and Monitoring
  • Reporting to Management and Authorities
  • Audit Preparation: Evidence & Documentation
  • Final Exercise: Developing a Role-Specific NIS2 Roadmap
  • Q&A, Feedback, Exam Preparation

Objectives:

• Understand the legal and regulatory framework of the NIS2 Directive
• Identify obligations for essential and important entities
• Conduct gap analyses and risk-based prioritizations
• Implement governance, technical, and organizational measures
• Establish incident response and reporting procedures
• Integrate NIS2 requirements into existing management systems (e.g., ISO/IEC 27001)
• Understand role-specific competencies according to the ENISA Cybersecurity Skills Framework (ECSF)
• Continuously monitor and improve the cybersecurity posture
• Act purposefully as a role holder (CISO, Architect, Responder)

Target audience:

• Information Security Officers
• Risk Managers
• IT Managers
• Compliance Officers
• Cybersecurity Consultants
• Professionals in ENISA Roles: CISO, Cybersecurity Architect, Cyber Incident Responder

Prerequisites:

• Basic knowledge of information security or cybersecurity is a prerequisite.
• Initial experience with management systems or compliance frameworks (e.g., ISO/IEC 27001, ISO 9001) is helpful, but not mandatory.

Description:

The five-day workshop SC175 NIS2 Lead Implementer (DEKRA™ LIN) targets IT professionals and executives who are responsible for the practical implementation of the NIS2 Directive in their organization. The training provides not only a comprehensive understanding of the legal requirements, but also demonstrates how to develop an effective cybersecurity program from them.

In this course, participants learn how to integrate NIS2 requirements into existing management systems, systematically assess risks and implement corresponding technical and organizational measures. Additionally, methods for monitoring, continuous improvement and auditing are presented, which enable the long-term successful management and verification of the implementation.

The course concludes with a DEKRA™ Certification after passing the examination.

Other Info:

The DEKRA™ certification exam is conducted fully online. For participation in the online exam, each participant requires their own notebook. The exam can be taken following the course; the exact exam period will be communicated after schedule confirmation.

Materials & Resources:

• Digital Participant Handout

• Article Overview of NIS2

• Templates: Gap Analysis, Risk Assessment, Incident Report

• Role-Specific Guidelines Based on ECSF