NIS2 for Boardrooms EN

NIS2 for Boardrooms

In-house
English

After this training, you will be able to:

Understand and explain the impact of NIS2 and the Dutch Cybersecurity Act (Cyberbeveiligingswet, CBW) at board level
Address the explicit responsibility and liability of the board and individual board members
Position cybersecurity effectively within governance, strategy and risk management
Assess cyber risks in relation to business continuity and societal impact
Demonstrably fulfil and steer the duty of care
Fulfil the board’s role effectively during incidents and crises
Translate supervision, reporting obligations and compliance requirements into board-level decision-making
Provide direction on supplier and supply chain risks
Collaborate effectively with CISO, risk, IT and compliance without getting lost in operational detail

The NIS2 Directive and the Dutch Cybersecurity Act (Cyberbeveiligingswet, CBW) mark a fundamental shift: cybersecurity is no longer merely an IT matter, but an explicit responsibility of the board.

This training focuses on that new reality. The emphasis is not on technology, but on board-level governance, liability and decision-making under uncertainty.

Participants gain insight into the changing role of the board, the impact of a complex and geopolitical threat landscape, the translation of legislation into governance and strategic choices, and the consequences of insufficient direction, including personal liability.

The training also addresses the board-level aspects of cyber crises: how board members fulfil their role during incidents, how they steer crisis management effectively and how they remain demonstrably in control.

The training is interactive and designed to help board members become demonstrably in control of cybersecurity governance.

Course outline

Introduction and boardroom context

Why cybersecurity is a boardroom topic
The changing role of the board and supervision

Impact of NIS2 and the Dutch Cybersecurity Act

Governance and accountability
Duty of care and board liability
Scope and classification of organisations

Threat landscape

Development of threats, including state actors, cybercrime and supply chain attacks
Impact on the organisation and society
Supply chain dependencies and geopolitical forces

Risk management at board level

Definition of risk: threat × exposure × impact
Risk appetite and risk tolerance
Prioritising risks in relation to business objectives
Governance and responsibilities

Supply chain and duty of care

Supply chain responsibility as a legal obligation
Risks related to suppliers and MSP environments
Contractual and board-level assurance

Incident management and reporting obligations

NIS2 reporting timelines: 24 hours, 72 hours and final report
Role of the board during incidents
Steering the crisis organisation

Crisis management in the boardroom

Gold-Silver-Bronze model
Nose in, fingers out principle
Decision-making under pressure
Crisis communication

Alles geregeld, zodat jij je volledig kunt focussen op leren

Bij ICT Improve is een training meer dan alleen de lesstof. Je leert van ervaren trainers die dagelijks actief zijn in hun vakgebied. Zij combineren diepgaande vakinhoudelijke expertise met uitstekende didactische vaardigheden, zodat je niet alleen begrijpt hoe iets werkt, maar ook hoe je het direct succesvol toepast in jouw organisatie.

Onze trainingen zijn bewust interactief opgezet. Naast de expertise van de trainer leer je van de praktijkervaringen van deelnemers uit uiteenlopende organisaties en sectoren. Het delen van verschillende perspectieven, uitdagingen en oplossingen zorgt voor waardevolle discussies en inzichten die je direct kunt toepassen in je eigen werkomgeving.

Tijdens de trainingsdag zorgen wij voor een comfortabele, professionele en inspirerende leeromgeving. Bij al onze klassikale trainingen zijn koffie, thee, frisdrank, snacks, een uitgebreide lunch, alle trainingsmaterialen en gratis parkeren inbegrepen. Zo hoef jij nergens aan te denken en kun je je volledig richten op het ontwikkelen van je kennis en vaardigheden.

Wat kan ICT Improve voor u betekenen?

Maak een afspraak met één van onze experts via 040 202 18 03 of onze Contactpagina.