Cybersecurity Policies and Practices in the EU – for non-IT Experts (Module 2)

Project number: 21518012

- Online Course -

Request brochure

Date & pricing

14/04/2021 - 15/04/2021
Register before: 09/04/2021

€ 400,00 per attendee

€ 360,00 for EIPA members*

Cybersecurity Policies and Practices in the EU – for non-IT Experts (Module 2)

From:  360,00

Module 2 focuses on Cybersecurity in practice.

SKU: 21518012 Category: Tag:

Registration for this course is closed. Do you want to receive updates about the next editions of this course? Please subscribe to our newsletter

About this course


This two mornings training focuses on the policy aspects of cybersecurity, covering cybersecurity standards in the EU, how to adopt them and put them into practice. Module 2 will offer you a practical training (no IT expertise required) on how to design and implement cybersecurity policies and practices to protect your daily work, organisation and sector. At the end of the course, you will receive a Certificate. The course has been designed to match the European E-Competence Framework.

Over the past decades, Internet and Information and Communication Technologies (ICTs) have had a profound impact on our daily lives, becoming an integral part of our institutional and social fabric. The supply of critical services across many sectors, including emergency and security services, health, water and food, energy and electricity, banking and finance, commerce, transportation, communications and education is now heavily reliant on ICTs. Our reliance on internet and digital technologies makes us more vulnerable to new threats, including cybersecurity attacks. These threats put the provision of critical services, as well as the EU’s economies, at risk and ultimately compromise the security and fundamental rights of EU citizens.

Breaches of information security are a major threat to the functioning of our society, jeopardizing public services, businesses and the economy. Under the EU regulatory framework (e.g. GDPR, NIS, Cybersecurity Act) our cyber security risks need to be evaluated and security controls need to be implemented in the Information Systems of our infrastructures, where all procedures, personal data, people and objects are stored and exchanged in a secure manner. To plan and implement efficient security policies and to comply with the EU regulations, public authorities, organisations and professionals need to raise their cybersecurity awareness and fully develop the necessary skills. Professionals need to be aware of the various cybersecurity standards (e.g. ISO27001, ISO 27005, ISO 28000, ISO15408) and procedures that can help them to become compliant with the EU regulations and protect their daily work, organisation and sector.

This training focuses on the policy aspects of cybersecurity, covering cybersecurity standards in the EU, how to adopt them and how to put them into practice. This unique program brings together the experience of cybersecurity, security, EU policy and public administration experts to provide a practical understanding of the challenges related to designing and implementing cyber-proof policies within organisations and sectors. The training is designed specifically for non-IT professionals, with the objective of providing participants with the knowledge and skillset necessary to deal confidently with cybersecurity measures within their sectors and organisations.

What is our approach to online teaching and learning?

The delivery of our online training programmes is planned following the input of our online pedagogy specialists, to provide you with a high quality and effective educational experience. In this online training, we adopt a comprehensive approach, combining an in-depth overview of the legislative and policy-considerations to be taken into account when formulating cyber-resilient measures, and practical training. We will provide practical guidelines and use case studies, good practices and hands-on simulation exercises to allow you understand, design, adopt and implement good cybersecurity measures, in your work, organisation and sector. After this training, you will be able to use all the materials and practical exercises for your work. Whether you are a policymaker, interested in incorporating cyber resilience in your policies, or a professional who wants to make his/her work and organisation safer, this training is designed for you.

What you will learn in this module?

Participants attending this module will master the following concepts and skills:

  • Cybersecurity: fundamental concepts and knowledge;
  • Cybersecurity management and governance: bodies involved, processes and policies to manage cyber risks;
  • Crisis communication, business continuity and disaster recovery planning;
  • Prevention: the components of comprehensive cybersecurity policies
  • Formulating policies to strengthen cybersecurity resilience: how do I design policy measures to make my sector/organisation cyber resilient?

This module is part of a four mornings training. The training is divided into modules to offer you flexibility in adapting it to your needs. If you prefer to attend the first module, you can click on Module 1, or you can attend the full four mornings training.

How it will help you?

All classes will be held live and include an interactive component to allow you practice with the trainer and with fellow participants. In addition, you have access to four extra Master Classes with exercises. All exercises are optional; however, we strongly encourage you to practice in order to gain practical skills. The programme is divided into two self-standing and interconnected modules. You will be able to join only module I or both modules I and II.

Who will benefit most?

Recent reports warn us about cybersecurity skills gaps, among non-IT experts across all sectors in the EU, including public officials, lawyers, administrative staff, healthcare professionals, database managers. The course is relevant for public officials, legal practitioners, database managers, professionals in the private sector.

Once you register, we will ask you for details about your own professional sector. We have over 20 case studies and will select the case studies on the basis of your individual needs.

Clara Cotroneo

Clara Cotroneo

EU Internal and External Security / EU Public Sector Management

Nineta Polemi

Nineta Polemi

University of Piraeus, Dpt. of Informatics
Associate Professor of Cybersecurity , Founder of Security Research Lab

Haris Mouratidis

Haris Mouratidis

Centre for Secure, Intelligent and Usable Systems (CSIUS) at the University of Brighton
Professor of Software Systems Engineering and founding Director

Practical information

Online Course
For this online course we make use of Zoom

Programme Organiser
Ms Juliette Mollicone-Boussuge
Tel: +352 426 230 304

EIPA offers a discount to all civil servants working for one of EIPA’s supporting countries, and civil servants working for an EU institution, body or agency.

Who are the supporting countries?
Civil servants coming from the following EIPA supporting countries are entitled to get the reduced fee: Austria, Belgium, Bulgaria, Cyprus, Czech Republic, Denmark, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Lithuania, Luxembourg, Malta, the Netherlands, Norway, Poland, Portugal, Spain, Sweden.

For all other participants, the regular fee applies.

Prior payment is a condition for participation.

Cancellation policy
For administrative reasons you will be charged € 50 for cancellations received within 7 days before the activity begins. There is no charge for qualified substitute participants.

EIPA reserves the right to cancel the activity up to 1 week before the starting date. In that case, registration fees received will be fully reimbursed.

Tailor-made requests

We can tailor this specific programme to your exact needs. This could include but is not limited to specific topics or dates. If you are interested in this, please contact Ms Clara Cotroneo at

I have a question

Course > I have a Question

The programme

Module 2 – Part 1: Cybersecurity in practice
08.30 The EU regulatory cybersecurity framework in practice
Explain in practical terms the EU cybersecurity directives e.g. NIS, GDPRDr Nineta Polemi, Associate Professor, University of Piraeus, Dpt. of Informatics, Piraeus (GR)
09.30 Break and virtual networking
09.45 Cybersecurity Certification – Certification Act
The Cybersecurity act and policy responses in different sectors
Dr Nineta Polemi
10:45 Q&A session and break
11.00 Cyber Security Incident Handling
Incidents can disrupt an organisation, businesses and supply chains; business continuity plans and disaster recovery plans will ensure that organisations can respond and continue their operations. Examples from governmental disruptions.
Haris Mouratidis, Director, Centre for Secure, Intelligent and Usable Systems, University of Brighton, Brighton (UK)
11.45 Q&A session and break
12:00 Keynote speaker
AI and cybersecurity and the malicious uses of AI
Philipp Amann, Head of Strategy, European Cybercrime Centre
13:00 End of the first part of Module II
Module 2 – Part 2: Cybersecurity in practice – Hands on Experience
08.45 Guided in-class exercises on security management and personal cybersecurity and privacy hygiene
Focus on personal experiences and present at the end.
Small groups of participants
Dr Nineta Polemi and Haris Mouratidis
09.45 Break
10:00 Guided in-class exercise on incident handling, Business Continuity and disaster recovery plans
Dr Nineta Polemi and Haris Mouratidis
10:45 Seminar Review and knowledge testing
It will cover the overall understanding of the seminar and it will test the knowledge of the attendees through a quiz (the trainees will have the next 60 minutes to return their responses)
11:00 Break
11.15 Workshop
How do I create cyber security policies and procedures for my sector/organization? The starter tool kit
Clara Cotroneo, Lecturer, EIPA Luxembourg
12:45 End of the second day and Module II