Cybersecurity for Critical Infrastructures: Understanding and Implementing NIS2 & CER – Training

Strengthening Organizational Resilience through Regulatory Compliance In today’s interconnected world, critical infrastructure organizations face increasing cyber and operational risks. Our training equips participants with the knowledge and practical skills to understand, implement, and leverage the requirements of the NIS2 Directive and the Critical Entities Resilience (CER) Directive to enhance cybersecurity, compliance, and organizational resilience.

After completing this course, you will be able to:
Understand the objectives and requirements of NIS2 and CER
Correctly identify affected organizations and critical assets
Implement obligations, deadlines, and minimum security measures efficiently
Integrate cyber and physical security measures effectively
Assess threat scenarios realistically, including ransomware and phishing
Design compliant internal processes for incident response and resilience planning
Reduce organizational and executive liability risks
Actively strengthen cyber resilience within the organization

Course Content – Practical Implementation & Compliance Strategy

This hands-on course covers:

1 | Motivation
- Goals and purpose of NIS2 and CER
- Which organizations are affected (critical operators, key and essential facilities, medium and large enterprises)
2 | Requirements
- New and expanded obligations
- Minimum measures (e.g., BCM, supply chain security, multi-factor authentication)
- Size-cap rules and risk management requirements
- Executive liability and regulatory oversight
- Reporting obligations (24h for security incidents, 72h for evaluations)
- Training obligations for management
- Roles, responsibilities, and governance
- Ensuring organizational competitiveness
3 | Practical Example: Conducting a risk analysis
4 | Summary & Outlook: Trends and future regulatory developments

Target Audience

This course is designed for professionals and managers responsible for products with digital components:

Professionals and executives responsible for cybersecurity, compliance, or risk management, especially within critical infrastructures or NIS2-relevant organizations
IT, information security, and risk management leaders
Those responsible for implementing, monitoring, or auditing cyber and physical security measures
Executives seeking to understand and fulfill their obligations under NIS2/CER

Additional Information

→ Prerequisites

A basic understanding of IT systems, information security, or compliance is recommended. Prior knowledge of NIS2 or CER is not required but can be helpful to maximize practical application during the course.

→ Documentation

Participants receive comprehensive course materials, practical examples, and templates.