NIS2 · training

Training that changes what people do on Monday.

NIS2 makes training an obligation, not a nice-to-have. In Romania, article 14(2) of OUG 155/2024 requires essential and important entities to train all staff, and their management to take accredited training. We deliver the practical part: staff training built on your real systems, and an incident tabletop that rehearses the decisions management will actually have to make.

Two formats

Staff training (all personnel)90 minutes, on site in Sibiu or remote, in Romanian or English. Phishing and MFA-fatigue attacks as they look in your Microsoft 365, reporting a suspected incident in the first five minutes, handling data under GDPR, and the three things IT will never ask for by email. Built around your own tenant, tools and reporting channel, not stock slides. Includes a short knowledge check and attendance records you can file as NIS2 evidence.

Management incident tabletopHalf a day with the management board and the people who run IT and security. We play a realistic incident against your organisation, a ransomware outbreak or a compromised Microsoft 365 tenant, through the clock that OUG 155/2024 starts: the 24-hour early warning to DNSC, the 72-hour notification, who decides to isolate, who speaks to clients. You leave with the gaps written down, owners assigned, and a decision log that doubles as evidence that management oversees cyber risk.

Accredited management training: article 14(2) asks management bodies to follow accredited professional training. Our tabletop is designed to complement that course with practice on your own scenario, not to replace it. Ask us and we'll point you to the formats that fit your sector.

Why practical beats compliance slides

The usual NIS2 training is a slide deck about the directive. It ticks a box and changes nothing. The incidents that actually hurt mid-sized companies, phishing that ends in a compromised mailbox and a fraudulent payment, or ransomware that starts with one approved MFA push, are stopped by people who recognise them and know exactly whom to call. That's what we train, because it's what we deal with every week running security in a PCI DSS Level 1 environment.

What you get

Content tailored to your systems, threats and reporting process
Romanian or English delivery, on site in Sibiu and central Romania, or remote anywhere
Attendance list, materials and knowledge-check results for your NIS2 evidence file
For the tabletop: written findings, owners and deadlines, plus a reusable incident decision tree

Planning this year's NIS2 training?

Tell us how many people, which format and roughly when. We'll reply by email with a plan and a fixed price.

Get in touch →