NIS2⁴ Board - for top management

• Block length 90
• Teaching hours 16
• Refreshments Yes
• Exam No

The opening day of the training focuses on the implementation of an Information Security Management System (ISMS) in accordance with the Cybersecurity Act. Participants will learn how to properly scope an ISMS, identify key assets, and set security policies and measures. A significant portion of the program is devoted to the practical use of artificial intelligence - particularly tools such as Microsoft Copilot and ChatGPT - to effectively create security documentation, automate policies, and manage risk. Demonstrations of AI-generated documents and threat prediction are complemented by a model scenario of a vendor failure and its impact on an organization's security framework.

The second day focuses on the requirements of the NIS2 directive, which newly expands cybersecurity legislative obligations. Attendees will gain an overview of the key articles of the directive, the differences between essential and critical actors, and compliance obligations. The hands-on workshop will demonstrate the use of AI in risk analysis and the preparation of audit deliverables. In the human factors portion, the training will explore social engineering and the new deception techniques enabled by AI - from deepfake videos to generated emails. It concludes with a discussion of AI as a cyber defence tool and potential threat, including ethical dilemmas and future developments.