
The path builds the vocabulary and the conceptual models on which all the rest of the training rests: what we protect, from whom, with which controls and with what risk logic. It is the recommended prerequisite for the other paths.
Who it is for: all staff, with particular value for those with IT, process or compliance responsibilities.
Estimated duration: 26 hours. 6 modules, 103 test questions, 6 exercises.
Content updated to August 2026 with the European regulatory framework in force (NIS2 and Legislative Decree 138/2024, ACN determinations, CRA, DORA, AI Act) and with the threat context data from the Clusit Report 2026 and the ENISA Threat Landscape.