NIS2 Board & Management Training

NIS2 Board training is essential for successful implementation of your cybersecurity framework and for support within management.

The NIS2 Directive is more than just a guide-it is an obligation. The NIS2 Directive states that executives of vital and important organizations-particularly the Board of Directors and CEOs-must have a demonstrated understanding of cybersecurity. In doing so, they demonstrate the ability to make informed decisions that protect the organization, ensure managerial accountability, and maintain stakeholder trust.

NIS2 Board & Management Training programs

Contact

Trusted by 500+ customers in the Netherlands

Learning objectives of the training

Insight

Gain an understanding of the requirements of the NIS2 directive and its impact on your organization.

2. Responsibilities

Establish the Board's cybersecurity responsibilities.

3. Sanctions

Discussion of penalties, fines and liabilities when an organization is non-compliant.

4. Risk management

A practical approach to risk management and response measures for compliance with NIS2.

NIS2 Board & Management Training programs

For this training we offer a half-day program for participants already somewhat familiar with cybersecurity, and a full-day program for participants not yet experienced with cybersecurity.

NIS2 Board & Management Training (0.5 day)

NIS2 Board Training - Fully informed in one morning

For whom: directors, board members, and managers who already have some experience with cybersecurity
Duration: 0.5 day (09:00 - 12:30)
Number of participants: maximum 8
Includes certificate of participation

9:00

Opening, introduction and content training

9:15 - 9:45

What is NIS2?

Purpose legislation and cybersecurity law
Core principles of information security
Duty of care and duty of notification
Supervision

9:45 - 10:00

Coffee Break

10:00 - 11:00

NIS2 obligations at a glance

Policy and risk management
Incident Procedure
Business continuity
Security in supply chain
Securing networks and information systems
Cyber hygiene and training
Cryptography
Mastering personnel
Logical and physical access policies
Asset management
Alerts, advice and information industry associations
Evaluation of implemented management measures

11:00 - 12:00

Risk management

Recognize and analyze risks
Identifying consequences of risks.
Select and implement risk management measures
Evaluate risk management measures

12:00 - 12:30

Questions, comments and room for exploration
Closing

NIS2 Board & Management Training (1 day)

NIS2 Training - Fully prepared in one day

For whom: directors, executives and managers with no experience implementing security
Duration: 1 day (09:00 - 17:00)
Number of participants: maximum 15
Includes certificate of participation

9:00 - 9:15

Opening, introduction and content training

9:15 - 9:45

What is NIS2?

Purpose legislation and cybersecurity law
Core principles of information security
Duty of care and duty of notification
Supervision

9:45 - 10:00

Coffee Break

10:00 - 12:00

NIS2 obligations explained in detail

Risk management policies
Incident Procedure
Business continuity
Securing networks and information systems
Cyber hygiene and training
Cryptography
Management of personnel
Logical and physical access policies
Asset management
Alerts, advice and information from industry associations
Evaluation of implemented management measures

12:00 - 13:00

Space for questions, comments and deepening
Lunch break

13:00 - 14:45

Comprehensive explanation of risk management including practical examples (provided)

Recognize and analyze risks
Identifying consequences of risks.
Select and implement risk management measures
Evaluate risk management measures

14:45 - 15:00

Coffee Break

15:00 - 15:30

How do you get all that done?

NIS2 and ISO 27001

15:30 - 16:30

Space for questions, comments, deepening and discussion

16:00 - 17:00

Afterglow and closing

How can we help you?

18

sectors affected by NIS2

40.000

Organizations covered by the NIS2

11

Critical sectors

Which organizations are covered by the NIS2 directive?

Compared to the old NIS guideline, NIS2 applies to significantly more organizations. These are characterized by:

Activity in essential and important sectors (see image to the right)

Minimum 50 employees and/or an annual turnover and balance sheet total of at least EUR 10 million

Not sure if NIS2 is applicable to your organization? Please do not hesitate to contact us without obligation.

Remark:
An organization may still be considered essential or important without meeting the size criteria. For example, when it is critical to the social or economic activity of the Netherlands.

Important dates for NIS2

15/04/2026

On April 15, 2026, the House of Representatives adopted the legislative proposals for the Cybersecurity Act and the Critical Entities Resilience Act.

02/06/2026

On June 2, 2026, the Senate issued a report on both legislative proposals. The government will respond to this with a memorandum in response to the report, after which the plenary debate in the Senate will follow.

01/07/2026

The Ministry of Justice and Security has indicated that it aims for the law to enter into force before the summer (July 1, 2026).

Remark:
The official dates may shift. As soon as the law takes effect, organizations must direct fulfill the obligations that come with it: the duty of care, reporting obligation and mandatory registration. Therefore, the national government advises organizations to not to be awaited until the Cybersecurity Act enters into force, but to get started right away.

Ready to get started?

We are happy to help you with NIS2. Leave a message to the right and one of our experts will contact you within one business day!

Marcel Dusink
IT and ISO auditor