Comprehensive Cybersecurity Training for Businesses

The NIS2 Directive is just like the GDPR was a few years ago—many people think it doesn’t apply to them until they face their first audit or data breach. Our cybersecurity training isn’t a boring legal lecture—it’s a survival guide for your business.

TRAINING PACKAGES

Choose a plan that's right for your organization

Each program is tailored to the specific needs of the sector and is based on the ITH specialists’ many years of engineering experience.

2 HOURS

Basic Security Training

The perfect introduction for all employees. Raising awareness of everyday risks.

Due Diligence in Data Protection—Legal Basis
Password Creation and Multi-Factor Authentication (MFA)
Recognizing Phishing
No limit on the number of participants—the ability to train the entire organization at once

I choose

Standard Security Training

It expands participants' knowledge of the practical aspects of information security. Each participant receives training materials and a certificate.

Data Security for Data Processed in the Cloud and on Mobile Devices
Legal obligations (NIS2, GDPR)
Social Engineering in Business Relationships
Training materials and a personalized certificate for each participant

I choose

6 HOURS

Premium Security Training

Advanced incident response procedures and crisis management for IT and security personnel, as well as executive management.

Attack simulations—deepfakes, spoofing
Documentation as evidence of due diligence before the supervisory authority
"Before" and "After" Knowledge Tests
+1 hour of consultation in areas requiring improvement

I choose

SCOPE OF TRAINING

8 subject areas—from law to the psychology of attack

Our training programs combine theory with practice. The practical aspects of the courses help employees understand that their day-to-day decisions matter to the safety of the entire company.

The NIS2 Directive and the National Cybersecurity System

Understanding the relationship between EU and national regulations, as well as the responsibilities of key and important entities.

Responsibilities of the Board of Directors and Management

Direct financial responsibility of the management board. We’ll teach you how to approve security strategies without a Ph.D. in computer science.

Risk Management and Business Continuity

Asset identification, vulnerability assessment, and BCP and DRP plans that are resilient to ransomware attacks.

Incident response procedures

Critical steps following the detection of a breach. Reporting to the NASK/MON/GOV CSIRT within the statutory deadlines.

Data Protection and Information Security

Encryption, MFA, DLP systems. Configuring Microsoft 365 (SharePoint, Teams) for compliance.

Supply Chain Security

Vendor audits, contract provisions. Your company may be held liable for suppliers who have access to your systems.

The Psychology of Cyberattacks - AI, Deepfakes, Spoofing

Business Email Compromise, fraudulent transfer requests, phone number spoofing. Two-factor verification procedure.

Security Documentation and Policies

Password and MFA policies, disaster recovery plans, incident reporting procedures, and a record of processed data. Ready-made templates.

NIS2 DIRECTIVE

The NIS2 Directive and Its Significance for Polish Businesses

The NIS2 Directive is an EU regulation aimed at improving cybersecurity in EU member states, expanding on the previous NIS Directive. In Poland, its implementation is directly linked to amendments to the provisions governing the national cybersecurity system, which imposes a range of obligations on thousands of new entities. Its importance cannot be overstated—this regulation makes digital resilience a measurable market standard.

Understanding the NIS2 Directive requires looking at the organization as a whole. It’s not just about software, but above all about risk management and appropriate Procedures. New regulations require companies to implement adequate security measures, which must be continuously monitored by the supervisory authority. Every regulated entity must demonstrate that it is taking concrete steps to minimize risks.

LIABILITY

Responsibilities of the Board of Directors and Management

One of the most important aspects of the new regulations is the management board’s direct responsibility for the state of security measures. The NIS2 Directive clearly states that members of decision-making bodies can no longer delegate security responsibilities solely to “IT specialists.” Management must actively participate in processes such as threat identification and the approval of business continuity strategies.

Non-compliance with the provisions of the NIS2 Directive and the amended Act on the National Cybersecurity System may have severe consequences. Members of the management board may be held personally financially liable for cybersecurity failures. That is why it is so important for individuals at the highest levels of decision-making to participate in this training, gaining practical knowledge on how to oversee the implementation of security policies and what responsibilities they bear.

DOCUMENTATION

Information Security Documentation and Policies

Implementing security measures is only half the battle. The other half is documenting them. The obligations under the NIS2 Directive include creating and regularly updating information security policies.

During training sessions, when reviewing documentation, we focus on:

password and MFA policies;
disaster recovery plans;
incident reporting procedures;
a register of processed data sets.

We won’t leave you with a blank page. We’ll provide you with ready-made designs and templates that you can easily customize for your business.

RISK MANAGEMENT

Risk Management and Business Continuity

Effective risk management is at the heart of a secure organization. This process encompasses not only IT systems but also the management of physical and information assets. Every participant in the training program learns how important it is to properly identify resources and assess their vulnerability to cyber threats.

As part of the training, we place great emphasis on developing and testing business continuity plans. The continuity of business processes in the face of a ransomware attack or an IT system failure is a matter of survival for many companies. The NIS2 Directive introduces obligations regarding the implementation of technical and organizational measures designed to ensure the security of IT systems within organizations.

Key elements of business continuity management:

regular backups and verification (Veeam, Synology C2);
precise incident response procedures;
contingency plans in the event that key services are unavailable;
24/7 continuous monitoring of systems for anomalies.

Prepare Your Organization for NIS2

Incident Response Procedures, Reporting

Companies usually find out just how badly their procedures have failed when the screen goes black and a ransom demand appears. Our training programs are...

Information Security

Data security cannot be managed in isolation from technology. During the training, experts demonstrate how to properly configure the Microsoft 365 environment (including SharePoint and...

National Cybersecurity System

The national cybersecurity system is becoming increasingly robust, and the responsibilities of key entities are being monitored more rigorously. Participating in this training helps you...

Staff Awareness

Training must include all employees, and its purpose is to raise awareness of risks and improve the ability to respond to incidents. Without a high...

Monitoring, Oversight, and Compliance Audits

24/7 monitoring? It’s not a luxury. It’s a necessity. Hackers don’t work from 8:00 a.m. to 4:00 p.m. If your system doesn’t detect an anomaly...

Supply Chain Management

The NIS 2 Directive places a strong emphasis on the security of service providers. Every subcontractor with access to your IT systems must be vetted....

A safe workplace starts with informed employees

The goal of these training sessions is to prepare organizations for compliance audits and to increase their overall resilience against cyberattacks. Don’t let your company become an easy target. Training should be ongoing and regularly updated to address new and evolving threats.Secure your organization in accordance with the highest standards. Choose a training package tailored to your needs and gain peace of mind in the face of new regulations.

View packages Contact us

They trusted us

See more references

Modern Cloud Solutions for Business. Public Cloud and secure connections to global clouds provide flexibility and access to IT resources from anywhere.

Professional data centers: dedicated servers, colocation and server administration. We guarantee security, high availability and direct connections to global clouds.

Internet access for business in two product lines: symmetrical lines with guaranteed parameters for large companies or asymmetrical lines for smaller customers.

Comprehensive IT security services. Audits, vulnerability scans, protection against DDoS attacks, managed firewall and backups. Everything your company needs to operate securely.

Construction and maintenance of modern technical infrastructure: structured networks, video surveillance, access control and alarm systems, and intelligent buildings.

IT support in a service model. We provide support for businesses, conferences and events, server and network infrastructure administration, and WiFi design and monitoring.

Stable and secure hosting environments for enterprise applications and websites. Tailored solutions for businesses requiring reliable infrastructure.

Telecommunications solutions for business: virtual PBX, SIP Trunk, telephone subscriptions, IP phones and web-based systems. Corporate communications always under full control.

Write to us

Support
Maintenance

ITH NOC
Management Center
Infrastructure ITH

+48 22 539 99 99
[email protected]

Open all week, 24 hours a day

Solutions
for you

ITH sales team

+48 22 539 99 99
[email protected]

Open Monday through Friday from 9:00 a.m. to 8:00 p.m.

First and Last Name*

Company Email Address*

Phone Number*

Subject of the Conversation*

I Accept the Marketing Consent* Expand This offer does not constitute an offer within the meaning of the Civil Code. This offer is intended solely for business customers. All prices listed are net prices. * Pursuant to Article 23 of the Act of August 23, 1997, on the Protection of Personal Data (Journal of Laws of 2016, No. 922 of June 28, 2016, consolidated text), I hereby consent to the processing of my personal data provided in the form above (i.e., Tax Identification Number (NIP), phone number, email address) by ITH Sp. z o.o., with its registered office in Warsaw, ul. Nowogrodzka 31, 00-511 Warsaw, registered in the Register of Entrepreneurs of the National Court Register under KRS number 0000469801, Tax ID (NIP): 7010389026, REGON: 146777630, for the purpose of presenting and fulfilling a commercial offer. I have been informed of my right to access the data I have provided, to modify it, and to object to its further processing. The controller of personal data is ITH Sp. z o.o., with its registered office in Warsaw, at ul. Nowogrodzka 31, 00-511 Warsaw, registered in the Register of Entrepreneurs of the National Court Register under KRS number 0000469801, NIP: 7010389026, REGON: 146777630.

FAQ

In accordance with the NIS2 Directive, critical and important entities must ensure that their management and staff have the appropriate competencies. Regular training is an essential element of risk management.

Yes, each of our programs includes practical information on phishing, secure passwords, and the protection of data processed in everyday office work.

In the Standard and Premium packages, each training participant receives a certificate. In addition, we prepare a report for the board of directors, which can serve as evidence of due diligence before the supervisory authority.

We typically conduct training in the form of interactive online workshops, which allows employees from different locations to participate simultaneously. However, it is possible to arrange in-person training sessions.

Comprehensive Cybersecurity Training for Businesses

The NIS2 Directive is just like the GDPR was a few years ago—many people think it doesn’t apply to them until they face their first audit or data breach. Our cybersecurity training isn’t a boring legal lecture—it’s a survival guide for your business.