1.1. Introduction to CISCO security technologies and solutions. 1.2. Modern Network Security Threats, Managing a Secure Network 1.3. Securing Network Devices, Securing the LAN 1.4. Authentication, Authorization and Accounting 1.5. Access Control Lists, Intrusion Prevention Systems 1.6. Intrusion Prevention Systems 1.7. Cryptographic Systems & Services 1.8. Implementing VPNs and Adaptive Security Appliance Introduction & Implementation 1.9. Practical exercise

2.1. Introductory concepts of the NIS-2 regulations. 2.2. Key concepts and operation of the NIS-2 Directive. 2.3. Analysis of ENISA’s official guidelines for the technical implementation of the NIS2 requirements. 2.4. Alignment of the NIS-2 Directive with the ISO 27001 and ISO 27005 standards. 2.5. Monitoring, Detection and Response to Cybersecurity Incidents (Monitoring detection and Incident response). 2.6. The human shield against cyber threats, Recap

3.1. Introductory concepts of the DORA Regulation 3.2. Key concepts and operation of the DORA Regulation 3.3. Alignment of the DORA Regulation with the ISO 27001 standard 3.4. Alignment of the DORA Regulation with the ISO 27005 and 22301 standards 3.5. Monitoring, Detection and Response to Cybersecurity Incidents (Monitoring, detection and Incident response) 3.6. The human shield in tackling cyber threats 3.7. Recap

In terms of knowledge:

Upon completion of the teaching unit, trainees will be able to:

define the security requirements of a digital system that uses Information and Communication Technologies (ICT).

identify the vulnerabilities of a digital system that uses ICT, including zero-day (zero-knowledge) vulnerabilities.

analyse the potential threats/risks that may affect the operation, effectiveness, efficiency and privacy of a digital system.

design security mechanisms and protocols that meet well-defined requirements and protect against specific threats.

evaluate the effectiveness and efficiency of a security architecture by identifying potential weaknesses and limitations.

In terms of skills:

Upon completion of the teaching unit, trainees will have the following skills:

calculate and manage the operational risk arising from identified weaknesses and potential cybersecurity attacks.

be able to determine the level of compliance of a digital system or security solution with technological security standards and with the applicable legal and regulatory framework.

be able to design security mechanisms and protocols that satisfy, to the desired level, technological security standards and the applicable legal and regulatory framework.

be able to identify the areas within the wider field of cybersecurity that require further technical and scientific research, and to organise and carry out such research with a view to building more secure systems.

In terms of competences:

Upon completion of the teaching unit, trainees will have the following abilities:

Know the physical and logical foundations of a computer network

Configure dynamic routing protocols on network devices

Configure security countermeasures on network devices

Configure AAA services for network devices

Configure VPN services on network devices

In terms of knowledge:

Upon completion of the teaching unit, trainees will be able to:

Know the basic principles and objectives of the directive.

Know its structure and scope.

Know the differences between NIS and NIS-2.

Know the role of the Member States and the competent authorities.

Know the obligations of organisations that fall within the scope of the regulation.

Know best practices for the protection of critical infrastructure.

Know the strategies for preventing cyberattacks and data leaks.

Management of data breach incidents in accordance with NIS-2 and the GDPR.

Relationship between the requirements of NIS-2 and ISO

Risk management and threat assessment in accordance with ISO 27005, and how these support compliance with NIS-2.

Linking risk analysis with the compliance requirements of NIS-2.

Development of processes for continuous monitoring and threat detection.

In terms of skills:

Upon completion of the teaching unit, trainees will have the following skills:

Recognise and categorise cyber threats.

Analyse real attack incidents and their impact.

Develop detection and response mechanisms.

Recognise the role of encryption in protecting data and communications.

Recognise the link between cybersecurity and personal data protection.

Recognise the obligations of organisations regarding data protection (Privacy by Design & Default).

In terms of competences:

Upon completion of the teaching unit, trainees will have the following skills:

Manage data breach incidents in accordance with NIS-2 and the GDPR.

Know the relationship between the requirements of NIS-2 and ISO

Manage risks and assess threats in accordance with ISO 27005, and know how to support compliance with NIS-2.

Link risk analysis with the compliance requirements of NIS-2.

Develop processes for continuous monitoring and threat detection.

In terms of knowledge:

Upon completion of the teaching unit, trainees will be able to:

Know the basic principles, objectives and scope of the DORA Regulation.

Understand the structure and main chapters (ICT Risk Management, Incident Reporting, Testing, Third-Party Risk, Information Sharing).

Recognise the differences between DORA and other regulations (NIS2, GDPR, PSD2).

Know the role of the supervisory authorities (EBA, ESMA, EIOPA).

Understand the relationship between DORA and international standards such as ISO 27001, ISO 22301 and ISO 27005.

In terms of competences:

Upon completion of the teaching unit, trainees will have the skills to:

Apply ICT risk assessment and management procedures in accordance with the DORA framework.

Manage ICT incidents and cyberattacks in accordance with the requirements of DORA and the GDPR.

Design and evaluate operational resilience strategies, including testing and simulation exercises.

Identify and assess risks arising from third-party ICT service providers.

Develop compliance policies and procedures within the DORA framework.

In terms of skills:

Upon completion of the teaching unit, trainees will have the skills to:

Link ICT risk analysis with compliance requirements.

Integrate the principles of DORA into the overall operational resilience strategy.

Oversee and continuously improve monitoring, reporting and control procedures.