Foundation · Self-paced learning
Inquiry This course is not yet bookable.
A security report marks backups as green, but the last documented recovery test was twelve months ago and excluded a critical service. In the course, you decide what management needs next: which evidence to request, who should clarify the security issue and when to report again.
You work with a German NIS2 case in which the entity is assumed to be in scope. You distinguish the security assessment, legal clarification and management decision. From the case, you develop a checklist for security reports, actions and escalation points, then adapt it to your organisation. When the organisation changes, you revisit the outstanding questions.
Your checklist helps management discuss security reports. It contains questions about evidence, outstanding risks, follow-up assignments and dates for the next report.
Familiarity with your management role and authorised access to basic information about the entity and its security arrangements. A course case is available where information is missing or confidential.
Planned as approximately four hours of self-paced study with case decisions, explained self-checks and a personal checklist. The course covers the German implementation.
Regulatory scope: Germany.
Planned learning time: 4 hours
