| Thema | Einzelheiten |
| Thema 1 | - Testing and monitoring of a cybersecurity program: This domain assesses the abilities of Security Auditors and Compliance Officers in testing and monitoring the effectiveness of cybersecurity programs. Candidates learn to design and conduct audits, continuous monitoring, performance measurement, and apply continual improvement practices to maintain NIS 2 Directive compliance.
|
| Thema 2 | - Cybersecurity controls, incident management, and crisis management: This domain focuses on Security Operations Managers and Incident Response Coordinators and involves implementing cybersecurity controls, managing incident response activities, and handling crisis situations. It ensures organizations are prepared to prevent, detect, respond to, and recover from cybersecurity incidents effectively.
|
| Thema 3 | - Communication and awareness: This section covers skills of Communication Officers and Training Managers in developing and executing communication strategies and awareness programs. It emphasizes fostering cybersecurity awareness across the organization and effective internal and external communication during cybersecurity events or compliance activities.
|
| Thema 4 | - Fundamental concepts and definitions of NIS 2 Directive: This section of the exam measures the skills of Cybersecurity Professionals and IT Managers and covers the basic concepts and definitions related to the NIS 2 Directive. Candidates gain understanding of the directive¡¯s scope, objectives, key terms, and foundational requirements essential to lead implementation efforts effectively within organizations.
|
| Thema 5 | - Cybersecurity roles and responsibilities and risk management: This section measures the expertise of Security Leaders and Risk Managers in defining and managing cybersecurity roles and responsibilities. It also covers comprehensive risk management processes, including identifying, assessing, and mitigating cybersecurity risks in line with NIS 2 requirements.
|