Yes. You will receive a documented certificate of participation, which you can include in your compliance file as proof of due diligence.
Five modules. Three areas of expertise: identifying risks, evaluating measures, assessing impacts.
01 · NIS-2, BSIG and the threat landscape
- Classification of one's own impact (particularly important / important institution)
- Practical introduction using a typical attack example.
- The current threat situation assessed based on facts
02 · The three duties of management and liability
- Implementation, approval and monitoring obligations in detail
- Personal liability of management and its limits
- Demarcation: what can be delegated and what cannot.
03 · Identifying, assessing and prioritizing risks
- Simple methodology (risk matrix, "crown jewel" principle) without prior IT knowledge
- Principle of proportionality according to Section 30 Paragraph 1 BSIG
- Four strategies for dealing with significant risks
04 · The 10 measures according to § 30 BSIG at the governance level
- For each measure: legal requirement, management decision, typical mistake
- Review framework for your own approval decision
05 · Practical examples of attacks
- Anonymized, typical case patterns from administration and business
- Derivation of which measure would have prevented or limited the damage in each case
In conclusion: Summary, proof of participation for your compliance file and concrete next steps for your organization.