NIS2 for Boardrooms EN

NIS2 for Boardrooms

In-house
English

After this training, you will be able to:

Understand and explain the impact of NIS2 and the Dutch Cybersecurity Act (Cyberbeveiligingswet, CBW) at board level
Address the explicit responsibility and liability of the board and individual board members
Position cybersecurity effectively within governance, strategy and risk management
Assess cyber risks in relation to business continuity and societal impact
Demonstrably fulfil and steer the duty of care
Fulfil the board’s role effectively during incidents and crises
Translate supervision, reporting obligations and compliance requirements into board-level decision-making
Provide direction on supplier and supply chain risks
Collaborate effectively with CISO, risk, IT and compliance without getting lost in operational detail

The NIS2 Directive and the Dutch Cybersecurity Act (Cyberbeveiligingswet, CBW) mark a fundamental shift: cybersecurity is no longer merely an IT matter, but an explicit responsibility of the board.

This training focuses on that new reality. The emphasis is not on technology, but on board-level governance, liability and decision-making under uncertainty.

Participants gain insight into the changing role of the board, the impact of a complex and geopolitical threat landscape, the translation of legislation into governance and strategic choices, and the consequences of insufficient direction, including personal liability.

The training also addresses the board-level aspects of cyber crises: how board members fulfil their role during incidents, how they steer crisis management effectively and how they remain demonstrably in control.

The training is interactive and designed to help board members become demonstrably in control of cybersecurity governance.

Course outline

Introduction and boardroom context

Why cybersecurity is a boardroom topic
The changing role of the board and supervision

Impact of NIS2 and the Dutch Cybersecurity Act

Governance and accountability
Duty of care and board liability
Scope and classification of organisations

Threat landscape

Development of threats, including state actors, cybercrime and supply chain attacks
Impact on the organisation and society
Supply chain dependencies and geopolitical forces

Risk management at board level

Definition of risk: threat × exposure × impact
Risk appetite and risk tolerance
Prioritising risks in relation to business objectives
Governance and responsibilities

Supply chain and duty of care

Supply chain responsibility as a legal obligation
Risks related to suppliers and MSP environments
Contractual and board-level assurance

Incident management and reporting obligations

NIS2 reporting timelines: 24 hours, 72 hours and final report
Role of the board during incidents
Steering the crisis organisation

Crisis management in the boardroom

Gold-Silver-Bronze model
Nose in, fingers out principle
Decision-making under pressure
Crisis communication

Everything taken care of, so you can focus entirely on learning

At ICT Improve, a training course is about more than just the course content. You learn from experienced trainers who are actively working in their field every day. They combine deep subject matter expertise with excellent teaching skills, ensuring that you not only understand the theory but also know how to apply it successfully within your own organisation.

Our training courses are intentionally designed to be highly interactive. In addition to learning from the trainer, you benefit from the practical experiences of participants from a wide range of organisations and industries. Sharing different perspectives, challenges and solutions leads to valuable discussions and insights that you can immediately apply in your own work.

Throughout the training day, we provide a comfortable, professional and inspiring learning environment. All of our classroom training courses include coffee, tea, soft drinks, snacks, a comprehensive lunch, all training materials and free parking. Everything is taken care of, allowing you to focus entirely on developing your knowledge and skills.

How can ICT Improve help you?

Make an appointment with one of our experts via 040 202 18 03 or via our Contact page.