Cyberattacks pose an increasingly significant economic and security threat to the critical infrastructure of the Netherlands and Europe. To enforce the necessary measures against this, the NIS2 directive came into effect in the EU at the beginning of 2023. Member states are required to transpose the directive into national legislation. The Netherlands has adopted the Cybersecurity Act (Cbw) written for this purpose, which must be implemented in the short term. Critical infrastructure sectors, including energy, transport, healthcare, and digital services, must take measures to comply with the NIS2 directive and the resulting Dutch Cbw. The directive requires organizations to implement measures related to risk management concerning cybersecurity and includes obligations regarding the reporting of related incidents. 

By following the NIS 2 Lead Implementer training, you will gain a solid understanding of the requirements of the directive. Through interactive sessions, you will learn how to map the cybersecurity risks of an organization according to internationally recognized standards and implement appropriate measures to comply with the requirements of the NIS2 directive and the Dutch Cybersecurity Act (Cbw).

This training emphasizes the opportunities that international standards such as the ISO 27000 series, the NIST Cybersecurity Framework (CSF), and other standards provide to demonstrably show compliance with the CBW/NIS2 according to industry best practices.

By successfully completing the training with the accompanying exam, you can apply for the ‘PECB Certified NIS2 Directive Lead Implementer’ certification. This demonstrates that you are a valuable cybersecurity professional with the expertise to navigate the complex landscape of cybersecurity for critical infrastructure and contribute to the resilience of an organization and Dutch/European society.

Extra GAP Analysis Day

In addition to the regular 4-day training, you will attend the NIS2 Lead Implementer training exclusively at TSTC with an additional Cbw/NIS2 GAP Analysis day. This allows you to leave the training with concrete advice regarding NIS2/CBW compliance for your own organization or that of a client. The GAP analysis is not part of the PECB exam material but adds practical value to the standard training. The added fifth day gives the regular PECB training a more practical character, especially since it delves deeper into concrete practical measures alongside the ISO solutions offered by PECB in the first four days. The extra day allows us to adjust the first days to better align with the final GAP analysis.

The application we developed for the GAP analysis can also be applied further internally or externally after the training. Part of this additional day is also the extra book ‘NIS2 The Navigator’s Handbook - Bridging the Cybersecurity GAP’ written by our trainer Michiel Benda. 

If you are looking for a more compact training on the NIS2/CBW or are not involved in the implementation of the law, our 2-day Certified NIS2 Professional (CNIS2) training is a good alternative.

In the PECB NIS2 Lead Implementer exam, you will be tested on the following domains, which the training will prepare you for:

• Domain 1: Fundamental concepts and definitions of the NIS2 directive
• Domain 2: Planning the implementation of the requirements from the NIS2 directive
• Domain 3: Cybersecurity roles and responsibilities and risk management
• Domain 4: Cybersecurity measures, incident management, and crisis management
• Domain 5: Communication and awareness
• Domain 6: Testing and monitoring a cybersecurity program