You are at: Home>Training>Find your course>Details

Curso S-0F Auditor/a Líder NIS 2

Presencial Live Training In Company

El presente Título Propio de AENOR de AUDITOR/A LÍDER NIS 2, da respuesta a la necesidad de otorgar conocimientos, al máximo nivel, para liderar auditorías internas y externas de cumplimiento de las obligaciones que prevé la Directiva 2022/2555 del Parlamento Europeo y del Consejo de 14 de diciembre de 2022 relativa a las medidas destinadas a garantizar un elevado nivel común de ciberseguridad en toda la Unión, por la que se modifican el Reglamento (UE) nº 910/2014 y la Directiva (UE) 2018/1972 y por la que se deroga la Directiva (UE) 2016/1148 (Directiva NIS 2).
El programa se estructura en tres cursos/módulos de 7, 7 y 14 horas, en el que se analizan los conocimientos necesarios para cualquier persona que, en su ámbito profesional, requiera planificar y realizar auditorías sobre los requisitos y las obligaciones impuestas por la Directiva en una organización dentro de su ámbito de aplicación.

Intended for

This course is designed for those with management and decision-making duties, IT Managers, CISOs, specialist technical staff, IT technical operators, technology operators, individual auditors, or audit assistants who wish to gain new knowledge and experience, and who need training in the requirements and obligations for compliance with the NIS2 Directive.

Objectives

The main objective of the programme is to improve a command of the standard and specifically of the requirements of the same, and achieve the training and skills necessary for preparing and carrying out internal and external audits in compliance with the NIS2 Directive in companies within their scope of application.

Content

COURSE 1 - Cybersecurity management in the European Union (7 hours)

• NIS2 Directive: introduction, legal framework, main points.
- Regulatory framework: from NIS1 to NIS2
-Structure of the Directive.
- Transposition of the Directive.
- General provisions of the Directive: objective, sectors involved, classification of entities.
- Institutional framework.
- Supervisory and Execution skills of the Control Authorities
-Administrative fines, Personal data security breaches, and Sanctions.
- Compliance: Article 21, ISO 27001 and Specialised Compliance Profile NIS2 in ENS

• Analysis of the NIS2 Directive.
-Planning the implementation of the Directive.
- Organisation and its context.
- Impact of regulations by sectors
-Cybersecurity governance
-Roles and responsibilities in cybersecurity. ISO 27001 and ENS

COURSE 2 - Cybersecurity risk management in accordance with NIS2 (7 hours)

• Asset Management and Risk Management.
- Methodology for conducting a Business Impact Analysis (BIA). ISO 22301.
- Asset management
- Risk Assessment and Management methodology. ISO 31000
-Risk management
-Contextualizing risk. ENISA and MAGERIT.

• Cybersecurity Risk Management Measures. Cybersecurity controls, incident management and crisis management.

- Organizational, technical and operational cybersecurity controls. ISO 27001, ISO 27002 and ENS.
- Supply chain security. ISO 28000.
- Incident management
- Crisis management. Context, concepts and principles. ISO 22361.
- Incident Management Framework
- Crisis Management Plan

COURSE 3 - Internal Auditor NIS2 (14 hours)

• Introduction to audits. Guidelines and principles.
- Introduction to audits
- Definition, concepts, objectives and types of audits
- Audits as a requirement for standard compliance
-Guidelines for audits of ISO 19011 management systems.
- Audit principles

• Competence, criteria and assessment methods in accordance with ISO 19011
-Competence and assessment of auditors
-Auditor conduct
-Auditor assessment criteria
-Assessment methods

• The audit procedure for Directive NIS2. Establishing an audit programme. Resource planning. Preparation. Implementation. Final Report. Monitoring activities.
- Audit procedures. Objectives, scope and criteria
-Establishment of the audit programme. Planning and Resources. Management of the PDCA audit process.
- Preparation of audits. Roles and responsibilities
- Audit plan: Start and closure meetings. Document review. Data compilation. Findings. Conclusions.
- Preparation and distribution of the final report
-Follow-up activities

Live Training/Streaming

Aula virtual

24/03/2025 - 27/03/2025

1.290 + IVA 21%

Call description

Description of format

The courses are taught on a tele-training platform with the simultaneous presence of teachers and students interacting in the Virtual Classroom throughout the training session.
During the duration of the course, the teacher presents the subject by videoconference, with practical examples and taking into account the students' queries and questions.
The teacher combines theoretical sessions with collaborative exercises in work teams, which guarantees learning and knowledge acquisition, in a manner similar to face-to-face training.

Schedule

28 hours. From 9:00 to 14:00 and 15:00 to 17:30.
Dates: 24/03/2025 - 27/03/2025

Intended for

On-site

Our facilities are designed to facilitate learning, in a modern and collaborative space. The location of the facilities is very well communicated by metro, train or bus.
Our courses are very practical and face-to-face training facilitates learning by applying knowledge through group work. It also makes it easier to communicate personally and to network with teachers and other students.

Duration, schedule

28 hours. From 9:00 to 14:00 and 15:30 to 18:00.

Price

€1,290 (Taxes not included)

Live Training/Streaming

Duration, schedule

28 hours. From 9:00 to 14:00 and 15:00 to 17:30.

Price

€1,290 (Taxes not included)

FUNDAE allowance In-company training