Strengthen Knowledge. Live Security. Demonstrate Compliance.
With practical training and recognized certifications, we prepare your team for current requirements in information security, cyber resilience, and compliance.

NIS2 & Cyber Resilience – Practical Training
This practice-oriented training provides a structured overview of the NIS2 directive and its implementation under the German NIS2 Implementation Act (NIS2UmsuCG). Participants gain clarity on scope, obligations, supervision, reporting requirements, and management responsibility.
- Regulatory requirements, ISO 27001 integration & practical operational implementation
- Focus: Operational implementation of NIS2 based on ISO/IEC 27001
- Integration into existing ISMS, BCM, and data protection processes
- Management of supply chain and third-party risks
- Designed as a compact 1-day training, but flexibly adaptable to your organization's requirements in terms of time and content
- Practical templates & guidelines: NIS2 guidelines, security policies, supplier questionnaires, and contract templates
Training contents at a glance
NIS2 – Regulatory Overview & Scope
Objectives, structure, and affected entities (critical, particularly important, important)
German NIS2 Implementation Act & Supervision
Role of NIS2UmsuCG, tasks of BSI and CSIRTs, registration obligations, and initial effective dates
Obligations, Governance & Management Responsibility
Risk and security management, TOMs, incident reporting, and training and oversight obligations of executive management
Operational Implementation with ISO/IEC 27001
NIS2 gap analysis, derivation of legal requirements, and integration into existing ISMS, BCM, and data protection processes
Supply Chain, ICT Providers & Third Parties
NIS2 requirements for suppliers, supply chain risk analysis, and management of ICT service providers
Documentation, Evidence & Contractual Requirements
Evidence, reporting, and documentation obligations as well as contractual and governance requirements


Our Training & Certification Formats
CRA Practical Training
From Secure-by-Design to CRA-compliant product development. Structured overview of CRA regulation, roles & responsibilities, secure SDLC, vulnerability management, SBOM & open-source risks, supply chain, contracts & liability.
EU AI Act & AI Governance – Practical Training
Regulatory requirements, governance structures & secure AI use in practice. Risk-based classification of AI systems, obligations for providers and deployers, operational AI governance, AI risks & control mechanisms.
Awareness Training
Employees as the strongest line of defense against cyberattacks. Phishing campaigns & evaluation, interactive learning content, participation certificates & audit evidence. Formats: live webinars, on-demand courses, e-learnings, gamification, awareness days.
CISO & ISB Training
Practical qualification for information security leaders. Fundamentals of information security, building and operating an ISMS, risk management & compliance, incident response & emergency management, governance & reporting.
VamiAcademy®
AI-powered IT Security & Compliance Training. The VamiAcademy is an AI-powered e-learning platform for role-based security and compliance training – efficient, individualized, and always up to date. Target group-specific content, compliance by design, audit-traceable content.
Trainings for every target group
Practical templates & guidelines included
Every training includes ready-to-use materials: NIS2 guidelines, security policies, supplier questionnaires, and contract templates — for direct implementation in your organization.
Frequently asked questions
Schedule a Training Session Now
Build competence – embed security and compliance sustainably. Free initial consultation.
Book a consultation