NIS2 & Cybersecurity in OT/Embedded Systems: strategy and practice

Description

The objective is to provide theoretical and practical skills to address the new regulatory and technical challenges introduced by the NIS2 Directive, with a particular focus on the cybersecurity of OT/embedded systems throughout their entire lifecycle.

Course Content

The course covers practices and organizational models for ensuring continuous security oversight, in line with NIS2 requirements, fostering readiness in incident response and operational resilience. It will analyze the required responsibilities, compliance criteria, and the implications in terms of governance and security of information and OT systems. Other objectives include linking NIS2 to other standards, understanding how to apply specific risk analysis techniques, and NIS2 monitoring and governance.

Audience

The course is designed for Cybersecurity Managers, IT/OT managers, system engineers, risk managers, and developers working in sectors such as industrial, automotive, medical, and IoT.

Benefits

The course provides an in-depth overview of the NIS2 Directive, clarifying the legal and organizational obligations for companies operating in critical sectors.

Prerequisites

Since this is a basic introductory course on NIS2, no prior knowledge is required.

References

This course is closely based on the NIS2 regulation, while also guiding participants in creating synergies between the directive and frameworks such as ISO/SAE 21434 (automotive security) and IEC 62443 (industrial systems cybersecurity), to ensure a coherent and integrated approach to security.