Skip to main content

NIS2 mandatory training for company management

4-hour live online training for managing directors and board members, aligned with the BSI guidance for NIS2 management training. No IT jargon, with a certificate of attendance.

This training is designed for Managing directors and board members (company management) and covers the NIS2 requirements that matter for your decisions as company management.

NIS2 mandatory training for company management

What you will learn

  • You better secure your personal liability as a member of management (Sec. 38 BSIG).
  • You recognize which NIS2 obligations really matter at management level.
  • You classify cybersecurity risks as a management and business risk (CIA triad, BIA).
  • You know the 10 minimum measures (Sec. 30 (2) BSIG) and the three-stage reporting regime (Sec. 32 BSIG).
  • You leave the training with a concrete 30-60-90-day roadmap.
  • Live session with discussion
  • Small group (max. 15)
  • Certificate of attendance
  • Documented proof

Agenda

  1. 1

    Module 1: NIS2 introduction

    Fundamentals, scope (Sec. 28 BSIG) and management's particular responsibility. Liability under Sec. 38 BSIG, sanctions, and registration and reporting obligations (three-stage model).

  2. 2

    Module 2: The three core competencies under Section 38(3) BSIG

    Identifying and assessing risks, risk management as a process, the 10 minimum measures (Sec. 30 (2) BSIG), the CIA triad, and cybersecurity as a business risk. Oversight duty, reporting, and demonstrability.

  3. 3

    Module 3: Practical application and decision-making

    Case studies (ransomware, supply chain), a management simulation game, the BSI guiding-questions self-check, and your 30-60-90-day roadmap. Plus a certificate of attendance for your documentation.

Your trainer

Michael Thissen

Michael Thissen

Gründer & Geschäftsführer, GreenSocks Consulting GmbH

Michael Thissen is the founder of GreenSocks Consulting GmbH. For over 15 years he has supported companies with ISMS, ISO 27001, NIS2 and BCM, from mid-sized businesses to large corporations. His conviction: cybersecurity is a management matter. He delivers the NIS2 training for companies as a partner trainer as part of the collaboration with Kopexa. Down to earth, pragmatic, actionable.

  • Gründer und Geschäftsführer der GreenSocks Consulting GmbH
  • 15+ Jahre Erfahrung in ISMS-, ISO-27001-, NIS2- und BCM-Projekten
  • Begleitet Unternehmen vom Mittelstand bis zum Konzern
  • Trainer für NIS2-Geschäftsleitungsschulungen, u.a. bei der DEKRA Akademie

Dates & booking

Offer exclusively for businesses (§ 14 BGB). All prices plus VAT, no consumer right of withdrawal.

  • Seats available
    Live-Online26.11.20264 hours, 08:30 to 12:30 (CET)Online
    Introductory price
    €399.00

    €249.00

    plus VAT

    Introductory price until 31/12/2026

  • Seats available
    Live-Online28.01.20274 hours, 08:30 to 12:30 (CET)Online
    Introductory price
    €399.00

    €249.00

    plus VAT

    Introductory price until 31/12/2026

  • Seats available
    Live-Online25.02.20274 hours, 08:30 to 12:30 (CET)Online
    Introductory price
    €399.00

    €249.00

    plus VAT

    Introductory price until 31/12/2026

  • Seats available
    Live-Online25.03.20274 hours, 08:30 to 12:30 (CET)Online
    Introductory price
    €399.00

    €249.00

    plus VAT

    Introductory price until 31/12/2026

  • Seats available
    Live-Online29.04.20274 hours, 08:30 to 12:30 (CET)Online
    Introductory price
    €399.00

    €249.00

    plus VAT

    Introductory price until 31/12/2026

Frequently asked questions

Is there really a training obligation for management?

Yes. Sec. 38 (3) BSIG requires the management of affected entities to personally attend training, separate from the general staff training under Sec. 30 BSIG.

Is an online training sufficient for management?

The law doesn't prescribe a specific format. What matters is that the training actually takes place and is documented. Our training is live, interactive and with discussion, not a passive video.

Does the certificate satisfy the proof requirement?

The certificate documents your attendance and serves as evidence for your internal records. There is no legally prescribed certification body for NIS2 trainings, proof of actual attendance is what counts. Combined with implementing the measures covered, this proof is an important building block for evidencing your personal duty of care.

Can I book as a private individual and use a right of withdrawal?

No. This is a B2B offer for companies. As you are booking as a business under Sec. 14 BGB, there is no consumer right of withdrawal.

Do other employees need to be trained too?

Yes, separately from this, Sec. 30 (2) BSIG requires awareness training for the entire workforce.

How does the online training work technically?

The training runs live via Microsoft Teams. You'll receive an invitation link beforehand, a current browser or the Teams app is enough, a headset is recommended. A camera is not required, but welcome for the discussion and Q&A.

Can I also book the training in-house for my company?

The current dates are open live online sessions with participants from different companies. For dedicated in-house dates, please get in touch with us directly.

In which language is the training held?

The open seminar is held in German. For inhouse trainings, English is available on request, the trainer speaks both German and English.

Prefer inhouse?

We come to you and train your whole team, tailored to your systems and maturity.

  • For your whole team on one date
  • Tailored to your systems, roles and maturity
  • On-site or remote

Request inhouse training

We come to you. Send us a short message and we will suggest dates.

By submitting you agree that your data will be processed according to our privacy policy.