Training

Cybersecurity Act (Cbw) training for board members

What does the Cyber Security Act (Cbw) require of you as a board member? How do you assess cyber risks, and what measures are needed to make your organisation digitally resilient? In this training course, you will learn how to fulfil your board-level responsibilities for cybersecurity.

Binnenkant van het UVA-gebouw met uitzicht op leslokalen
SURF office in Utrecht, Moreelsepark 48

The Cybersecurity Act sets out requirements regarding the knowledge and involvement of board members in the field of cybersecurity. For example, as a board member, you must be able to assess cyber risks and set the right priorities. Completing a training course is a legal requirement for this.

That is why SURF, in collaboration with experts from education and research sectors, has developed a training course that meets the requirements of the Cbw and reflects the practical realities of education and research institutions. You will gain an understanding of the key risks and obligations and learn which questions to ask in order to make well-informed decisions.

Course structure

The course consists of four modules that alternate between theory, group discussions and practical case studies. You will receive a course handbook and assignments in advance to help you prepare for the topics and their application within your own institution. Upon completion of the course, you will receive a certificate or edubadge.

Programme

09.30 Walk-in
10.00

Uncertainty: understanding the risks and obligations

  • Key concepts in cybersecurity
  • Obligations under the Cybersecurity Act
  • Understanding cyber risks and uncertainties
11.30

Know Your Position: understand your responsibilities

  • Your role as a board member and your responsibilities in risk management
  • The distribution of responsibilities within the organisation
  • The Three Lines Model, the Cyber Kill Chain and relevant cyber threats 
12.30 Lunch
13.00

Get in Control: stay in control of cybersecurity

  • Implementing appropriate security measures
  • Risk management and business continuity
  • The role of audits in assessing security measures
14.30

When Murphy Strikes: preparing for a cyber crisis

  • Incident response and crisis management
  • Your role during a cyber incident
  • Decision-making and responsibilities during a crisis
16.00 End

For whom?

This training course is intended for board members of educational and research institutions affiliated with SURF, but you may also take part if you are a board member of an institution not covered by the Cbw.

This training is in Dutch.

Prior knowledge

No specific prior knowledge is required.

Registration and fees

Any questions?

Do you have any questions about the training course or would you like to know what options are available for your institution? Please get in touch via security-trainingen@surf.nl.

Would you prefer to attend the training at a different date?

You can also attend this training on the following dates:

Sign up now Cybersecurity Act (Cbw) training for board members

SURF office in Utrecht, Moreelsepark 48

Related topics: