Every major cybersecurity regulation requires documented staff training. We deliver live sessions that satisfy the specific standard you're accountable to — with attendance records for your audit file. One flat rate. Unlimited users.
NIS2 Article 21 says 'basic cyber hygiene practices and cybersecurity training.' DORA Article 13 says 'ICT-related awareness programmes and digital operational resilience training.' HIPAA §164.308(a)(5) says 'a security awareness and training program for all workforce members.' The FTC Safeguards Rule requires 'training and management of service providers.' Every major framework has a training clause — and a regulator who will ask for documented evidence.
Generic e-learning doesn't satisfy these requirements because it's not documented at the individual level, it's not interactive, and it's not specific to the threat landscape the regulator is concerned with. Our sessions are live, expert-led, and conclude with a session summary and individual attendance record that directly addresses the named compliance requirement.
EU frameworks. NIS2 and DORA are the most demanding cybersecurity training mandates currently in force. Both explicitly require management body training — not just staff training. Both require documented evidence. We have dedicated programmes for each that cover the specific articles, thresholds, and enforcement context your team needs to understand.
US frameworks. HIPAA covers every healthcare entity. The IRS Written Information Security Plan (WISP) requirement covers every tax professional. ABA Model Rule 1.6 and Comment 8 cover every law firm. PCI-DSS covers every business that handles card data. We map session content to each framework's specific requirements and provide documentation you can present to an auditor, regulator, or cyber insurer.
One Business session covers your entire team — management body included. Attendance records and session summary provided. $900 flat, unlimited participants.