Training · decisions and practice
Prepare your team for security decisions
We tailor the programme to participants and their responsibilities. We combine clear explanations with work on a scenario, process or action plan.
A programme tailored to each role
Management and process owners
Business risks, responsibilities, suppliers and decisions during a disruption. The goal is to prepare the people who set priorities and accept risks.
Automation engineers and IT/OT teams
Remote access, segmentation, changes, backups and vulnerabilities. We work through examples related to maintaining the process.
R&D teams and product owners
Product lifecycle, CRA requirements, dependencies, SBOMs and release evidence. The goal is a shared approach to security work.
Workshops and exercises
Incident exercise
A tabletop scenario in which participants make decisions in a simulated situation. We practise escalation, supplier cooperation and communication.
Product security workshop
We organise risks, responsibilities and the information needed before a product release or after a component change.
PQC and crypto agility
We explain the implications of cryptographic change for products, systems and suppliers. We identify areas for an inventory and further analysis.
How we prepare training
- We identify participants, their responsibilities and a specific goal.
- We select modules, the technical level and a scenario.
- We agree the format, duration and materials that can be used.
- We deliver the training or workshop and gather findings.
- We organise follow-up actions together with participants.
Online or in-person delivery and duration are agreed for each programme. We can begin with a single topic and develop it into a series of sessions.
What your team receives
- Materials tailored to the agreed programme.
- A clear description of roles, decisions and key dependencies.
- Findings from the exercise or workshop and proposed next actions.
- A shared language for management, IT, OT and R&D.
Training develops skills. An audit assesses an agreed scope against evidence. We select them as separate or complementary activities.
Resources before and after the workshop
A shared reference point helps participants prepare and revisit the findings afterwards. We agree the programme and working materials for each team.
nis2cra.com
Resources, analyses, qualification tools and initiatives on NIS2, the CRA and OT cybersecurity.
cratrace.com
cratrace — a project for managing information and evidence throughout the product lifecycle in the context of CRA requirements.
Let’s define your training goal
Tell us who will take part, the decisions they make and the topic you want to work through. We will use this to develop the programme.