Management cybersecurity training

Who it is for and when

The training suits management teams and boards in organisations affected by the Swedish Cybersecurity Act, financial entities affected by DORA, and organisations that want management to understand its responsibility even without a legal requirement.

• You are affected by the Swedish Cybersecurity Act and need to show that management has been trained.
• You are a financial entity under DORA and the management body needs to show that it keeps its knowledge of ICT risk up to date through regular training.
• Management needs to be able to assess, decide on and follow up the organisation’s security and risk-management measures, but lacks the basis to ask the right questions.
• The board wants to understand what a supervisory case or a serious incident would actually mean.
• You have a technical security function but the decision paths up to management are unclear.

What we do

1. Tailored to your organisation. We go through which sector you belong to, whether you are an essential or important entity, which services are in scope and which risks are yours.
2. The training session. Half a day with management and the board: the legal requirements, the areas covered by the regulations, management’s own responsibility, the reporting duty and what supervision involves. For financial entities we start from DORA instead: the management body’s responsibility for the ICT risk management framework, third-party risk, incident reporting and testing.
3. Your own risk picture. We use your real systems, suppliers and dependencies as examples, not generic scenarios.
4. Decision points. We go through what management needs to decide and follow up, and how it is documented so that it holds up under review.
5. Documentation. Attendance list, agenda, materials and a short summary you can add to your governing documents.

Scope and price

A defined engagement: preparation, one half-day session and documentation afterwards. Where several companies or administrations are involved we set it up as a series of sessions.

The price varies from engagement to engagement and depends on how many people are to be trained, how many organisations are in scope and how much tailoring is needed. You get a clear proposal after the first conversation.

How it works

1. A first conversation. We listen to your situation and explain how we usually set up the work. You get our assessment straight away, free of charge.
2. A proposal with scope and price. A short written proposal with what is included, what you get, who does the work and what it costs.
3. Delivery and handover. We work together with your organisation, report continuously and hand over so that you can maintain the result yourselves.