Mandatory Security Competence for Boards and Executives

Why training has become an essential part of corporate governance

Competence requirements have changed

The EU has introduced a more comprehensive framework with greater accountability than before, including NIS2, DORA, the AI Act and the Digital Services Act. At the same time, customers, supervisory authorities and supply chains are placing ever higher demands on documented competence and the ability to manage risk systematically.

Organisations that fail to build competence internally risk falling behind, or taking on risk that could have been avoided with the right knowledge and routines.

Boards and executives need to understand more than before

Digital risk is now a natural part of corporate governance. That does not mean leaders must become technologists, but they need insight that enables them to:

• assess risks and consequences correctly
• prioritise the right measures
• ask the organisation the right questions
• see the connections between strategy, operations and security
• understand what EU requirements actually entail

Sound governance requires confidence in one's own competence.

Artificial intelligence creates both opportunities and responsibilities

AI can improve efficiency, strengthen quality and sharpen decision-making, but only if the organisation understands the frameworks, risks and requirements that come with it.

Competence in AI governance and risk management is now a critical part of business development.

Supplier security has become a governance responsibility

Requirements for contracts, audits, controls, maturity levels and documentation now reach across the entire supply chain. Without the right knowledge, an organisation does not know what to ask its suppliers for, or what it is actually accountable for.

What we offer

Berigo delivers a broad range of courses and training programmes, everything from condensed executive briefings to full certification tracks. Training can take the form of:

• Executive and board workshops
• Tailored in-house courses
• PECB certification courses (1 to 5 days)
• Topic-based professional seminars
• Dedicated training days and internal competence programmes
• Two-hour intensive sessions for rapid upskilling
• Multi-day deep dives for key teams
• Practical scenario exercises in preparedness and incident response

We can also build complete training programmes running over several weeks or months, designed to strengthen the organisation's maturity, governance culture and ability to manage risk.

Topic areas we cover

• ISO/IEC 27001: governance, implementation and auditing
• NIS2 compliance and governance model
• The AI Act and AI governance
• Strategic cybersecurity for executives and boards
• Supplier security and third-party management
• Risk management and internal control
• Privacy and GDPR
• Incident response and preparedness
• Security culture and awareness programmes
• Internal audit and control functions
• Decision support for digital risk
• Operational security for technical teams
• The role of the CISO and executive management in modern security

We adjust scope, level and content to the audience, from new employees to the chair of the board.

Tailored to your organisation's actual needs

No two organisations are alike. That is why we always map:

• maturity level
• industry context
• regulatory framework
• business model
• technology platform
• risk profile
• existing competence
• ongoing initiatives

We use this to design a training programme that delivers real value, not a generic programme that misses your actual challenges.

A teaching style that is calm, confident and professionally solid

The instructor delivering the courses has:

• a PhD in cybersecurity leadership
• more than 20 years of hands-on experience, both technical and strategic
• international instructor certification from PECB
• experience as CISO in a global organisation
• experience in board advisory and risk leadership
• experience with legal and regulatory processes
• experience from incident response and preparedness

The result is training that is professionally grounded, practical and realistic, delivered with a calm, reassuring and explanatory teaching style that makes the material accessible and understandable for everyone.

What you receive after completing a course

• Course materials that can be reused for further internal training
• Certification credentials (for PECB courses)
• Concrete action lists and priorities
• Recommendations for further competence development
• An overview of the regulatory requirements your organisation must meet
• A maturity assessment within the course area
• The option of follow-up, sparring and further advisory support

What your organisation actually gains

• Increased competence across the organisation
• Stronger governance and risk understanding
• Better compliance with EU requirements (NIS2, the AI Act, GDPR and others)
• Improved supplier control
• Reduced operational risk
• A better basis for management decisions
• A stronger position in tenders and customer assessments
• Faster maturity development
• More robust processes and culture

Competence is not a cost. It is an investment in safer decisions, better governance and increased value.

Get in touch

We offer a no-obligation scoping conversation to identify which courses best suit your organisation. Whether you need two hours with the leadership team, a full day for an entire department or a complete week-long course, we tailor the training to match your organisation's needs, pace and level of ambition.