The regulatory and methodological framework within which a defensible security programme is built. The path does not stop at describing the frameworks: it shows how they map onto each other and how they turn into verifiable evidence. In the second part the same framework becomes a compliance project carried out phase by phase, with the deliverable templates: asset inventories, Business Impact Analysis, business continuity and recovery plans, supplier register.
Who it is for: IT and security managers, compliance contacts, management bodies of entities in NIS2 scope.
Estimated duration: 56 hours. 13 modules, 220 test questions, 13 exercises.
Disclaimer. The contents are for training purposes and do not constitute legal advice. For the obligations that fall on your organisation always refer to the legislation in force and to internal legal support.
Contents updated to October 2026 with the European regulatory framework in force (NIS2 and Legislative Decree 138/2024, ACN determinations, CRA, DORA, AI Act) and with threat landscape data from the Clusit 2026 Report and the ENISA Threat Landscape.