Course overview

Get a clear introduction to the NIS2 directive and its importance for your organization.
This course will give you a basic understanding of NIS2, its requirements and purpose, and how it affects the work with cybersecurity and risk management. You get an overview of the most important changes compared to previous regulations and concrete examples of how different businesses can start to prepare.

Course Objective

Upon completion of the course, participants should have:

Basic understanding of the NIS2 Directive and its purpose.
Knowledge of how NIS2 relates to Sweden’s cybersecurity law.
A general knowledge of the organisational and technical requirements of the Directive.
Understanding of how responsibilities are distributed in the organization according to NIS2.
Ability to initiate a simple internal assessment (GAP thinking) and understanding of the importance of continuity, documentation and improvement over time.

Target Group

Organizations that are affected by NIS2 and need a first orientation and concrete tools to get started.

Prerequisites

IT skills that are good to have: IP understanding, general firewall knowledge and routing/switching, but not necessarily in depth.

Certification

This course does not have any associated certification. Each participant who completes the course receives a course certificate.

Trainer

This is delivered by one of Informator’s training partners, SecurebyQ.

More about the course

Course structure and content

Module 1: Introduction to NIS2 and Swedish application (45 min)
What is NIS2 and why does it exist?
The Directive as part of the EU and Swedish security framework
Link to the Cybersecurity Act and supervision in Sweden
Interactive session: Reflection on the organization’s current situation and preparations
Module 2: Roles, responsibilities and basic requirements (45 min)
What is required from management and functions?
Examples of organizational and technical measures
Discussion: What are the roles in our organization and who bears the long-term responsibility?
Module 3: GAP analysis, risk awareness and continuity (60 min)
What is a GAP analysis and how to start one?
Introduction to the NIS2 risk perspective
How to build continuity into security work?
Practical element: Simple GAP exercise in groups with subsequent discussion on next steps and improvement over time
Module 4: Incidents, policy work and improvement cycle (45 min)
What does NIS2 require in case of incidents?
Examples of information security policies (passwords, access control, incident procedures)
How to ensure that policies are kept alive and do not become shelf warmers?
Group exercise: Create a first draft of a policy – but think about revision and follow-up!
Closing and quiz (30 min)
Summary of the course and discussion of next steps in participants’ organizations
Quiz: 10 questions testing basic understanding (for self-assessment)

Course overview

4 hours

Basic

Can’t find a (suitable) date, but are interested in the course? Send in an expression of interest and we will do what we can to get an opportunity that suits.

För samtliga utbildningar gäller våra
Allmänna Villkor.

Company-adapted course

The course can be adapted from several perspectives:

Content and focus area
Scope of application
Structure

In collaboration with the course leader, we make sure that the course meets your wishes