Single course
from EUR 490 net
up to 25 participants; larger companies on request
Buy nowCYBERSECURITY AWARENESS E-LEARNING · EDITION 2026 · GERMAN OR AUSTRIAN COURSE VERSION
Cybersecurity Awareness E-Learning
The course covers the awareness side of NIS2 implementation: passwords and access security, email and phishing, mobile working and cloud, conduct during a security incident, supply chain and physical security. It is designed for management and the workforce — the law addresses both groups separately. You choose the course version for Germany (German BSI Act, BSIG) or Austria (Austrian NISG 2026).
Course contentfrom EUR 490 net up to 25 participants · larger teams on request · bundle of all 5 from EUR 2,190 net
WHY THIS TRAINING
Training is named expressly in NIS2 law — for the management and for the workforce.
The management bodies of particularly important and important entities must attend training on a regular basis in order to acquire sufficient knowledge and skills to identify and assess risks and risk management practices in the field of information technology security § 38(3) BSIG. For the workforce, basic training and awareness measures are part of the minimum content of the risk management measures § 30(2) no. 7 BSIG. In Austria, the management bodies of essential and important entities have to attend specifically designed cybersecurity training, and entities have to offer comparable training to their employees on a regular basis § 31(2) NISG 2026; basic cyber hygiene practices and cybersecurity training are among the risk management measures there § 32(4)(g) NISG 2026. Both go back to the same European requirement Art. 20(2) NIS2 Directive (EU) 2022/2555.
The course is the awareness component, not the management system. It replaces neither the risk management measures under § 30 BSIG or § 32 NISG 2026, nor the assessment of whether your entity falls within scope at all, nor legal advice. The certificate of participation documents attendance; it is not an official certification.
COURSE CONTENT
Chapters and format.
- 01Tuesday, 6:40 am
- 02What actually happened
- 03How someone got in
- 04The email that looked real
- 05Where doors still stand open
- 06The 24 hours
- 07Where it came from
- 08What stays with you
- 09Who is in scope and who carries the duty
- 10Identifying and assessing risks
- 11The ten points
- 12The route through the service provider
- 13What the outage means on the outside
- 14What you answer for
42 slides · quiz: 24 of 96 questions
Preview followsCourse screenshots will be added when the courses are final.
- Standalone HTML file (runs in the browser, no installation) or SCORM 1.2/2004 for your LMS.
- Final quiz with a printable certificate of participation and verification code.
- Legal-status updates for 12 months included; afterwards on preferential terms.
- German and English in one file, with audio.
WHO IT IS FOR
Two audiences, one course.
Management and management bodies
For them, attending training is expressly prescribed — in substance it is about identifying and assessing risks and risk management practices § 38(3) BSIG and, in Austria, about specifically designed cybersecurity training § 31(2) NISG 2026. In Germany, those who breach these duties are liable to their own entity under the rules of the applicable company law § 38(2) BSIG.
All employees
Phishing, passwords, cloud and mobile working are everyday matters, not specialist IT knowledge. That is precisely why the law names basic training and awareness measures as a minimum measure § 30(2) no. 7 BSIG. The chapter “The 24 hours” translates the reporting logic into what has to happen at the workplace: recognise it, report it immediately, cover up nothing. Designed for employees at screen-based workplaces: the stories play out in email, chat and login.
Germany or Austria
DE: BSIG, supervision by the Federal Office for Information Security (BSI). AT: NISG 2026 (Federal Law Gazette I No. 94/2025), supervision by the Cybersecurity Authority, which has been competent since 1 October 2026. The references and authorities always appear in the version for your jurisdiction — no mixed “DACH” edition.
PRICING
One price for Germany and Austria.
Bundle — all 5 courses
from EUR 2,190 net
AI literacy, data protection, cybersecurity awareness, whistleblower protection, anti-discrimination
Buy the bundleCustomisation on request: we insert your reporting office, internal processes and contact persons into the course; individual courses or additional chapters are created on request — via the contact form.
FREQUENTLY ASKED
In short.
Is the course sufficient for the training obligation of the management?
It covers the content named in § 38(3) BSIG — identifying and assessing risks and risk management practices in the field of information technology security — and documents participation. The law does not prescribe a particular format, a fixed interval or an approved provider. Whether your entity needs additional in-depth training follows from your own risk management.
We are not in scope of NIS2 — is the course still useful?
The training obligations under § 38(3) BSIG and § 31(2) NISG 2026 apply to particularly important and important entities in Germany and to essential and important entities in Austria. Many companies are affected indirectly because their customers demand security across the supply chain — § 30(2) no. 4 BSIG expressly names supply chain security, including the relationships with direct suppliers, as a minimum measure. As an awareness baseline the course works regardless of scope.
How do I order?
Online on this page: choose the course, enter your jurisdiction (Germany or Austria) and the number of participants, confirm that you are buying as a business and pay by card or SEPA direct debit via Stripe, or by bank transfer against invoice; you receive an invoice with VAT ID. The course file (HTML or SCORM) with your company name and logo arrives as a download link within 48 hours of receipt of payment (working days). Questions or more than 25 participants: contact form.
Do participants receive a certificate of participation?
Yes. After passing the final quiz, each participant can print a certificate of participation with name, course, date and verification code. It documents participation; the law does not require a certificate.
Is the course kept up to date?
Yes — for 12 months the course content is updated when the legal situation changes. Afterwards, existing customers receive further updates on preferential terms.
Germany or Austria?
There is a separate course version for each jurisdiction with the national legal references and authorities. Prices are identical.