{"id":28954,"date":"2026-07-24T16:53:12","date_gmt":"2026-07-24T16:53:12","guid":{"rendered":"https:\/\/www.stroople.com\/?page_id=28954"},"modified":"2026-07-24T17:07:23","modified_gmt":"2026-07-24T17:07:23","slug":"nis2-it-equipe-formation","status":"publish","type":"page","link":"https:\/\/www.stroople.com\/fr\/nis2-it-team-training\/","title":{"rendered":"Formation NIS2 pour les \u00e9quipes informatiques : Principes et conformit\u00e9"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

GRC-04<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

NIS2 Principles and Obligations for IT Teams<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t
\n
\n <\/i> <\/div>\n \n
\n\t\t\t\t
\n\t\t\t\t\t\t 1<\/span>\n\t\t\t\t\t\t\t\t\t<\/div>\n <\/span>\n

day(s)<\/h2> <\/div>\n <\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t
\n
\n <\/i> <\/div>\n \n
\n\t\t\t\t
\n\t\t\t\t\t\t In House<\/span>\n\t\t\t\t\t\t\t\t\t<\/div>\n <\/span>\n

<\/h2> <\/div>\n <\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t
\n
\n <\/i> <\/div>\n \n
\n\t\t\t\t
\n\t\t\t\t\t\t On-site <\/span>\n\t\t\t\t\t\t\t\t\t<\/div>\n <\/span>\n

Remote Session<\/h2> <\/div>\n <\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t
\n
\n <\/i> <\/div>\n \n
\n\t\t\t\t
\n\t\t\t\t\t\t Training center<\/span>\n\t\t\t\t\t\t\t\t\t<\/div>\n <\/span>\n

Paris<\/h2> <\/div>\n <\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t
\n
\n <\/i> <\/div>\n \n
\n\t\t\t\t
\n\t\t\t\t\t\t Audience<\/span>\n\t\t\t\t\t\t\t\t\t<\/div>\n <\/span>\n

Decision-makers<\/h2> <\/div>\n <\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t
\n
\n <\/i> <\/div>\n \n
\n\t\t\t\t
\n\t\t\t\t\t\t Fee<\/span>\n\t\t\t\t\t\t\t\t\t<\/div>\n <\/span>\n

On request<\/h2> <\/div>\n <\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

PRESENTATION & TARGET AUDIENCE<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Understand the framework. Deploy the measures that matter.<\/p>

An IT team translates regulatory requirements into concrete measures, selects tools, prioritizes remediation, and manages the relationship with suppliers. Without a precise understanding of the NIS2 framework and the internal division of roles, compliance ends up relying on individual interpretation and blind spots, particularly in organizations where no dedicated CISO position exists.<\/p>

This training is designed for CIOs and CISOs of entities subject to NIS2, and aims to give IT teams the reference points and methods needed to translate NIS2 into concrete day-to-day actions.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

PREREQUISITES \n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

No technical or theoretical prerequisites are needed to attend this training.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

LEARNING OBJECTIVES<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The overall pedagogical objective of this training is to explain the NIS2 regulatory framework to CIOs and CISOs and enable them to apply the methods and tools needed to translate it into concrete day-to-day actions.<\/p>

By the end of this training, participants will be able to:<\/p>

  • Identify the NIS2 regulatory framework and describe what it concretely changes for an IT team’s daily work.<\/li>
  • Distinguish their own role from that of their counterparts within the compliance framework, including in the absence of a dedicated CISO, and apply a RACI grid to the main NIS2 obligations.<\/li>
  • Apply a recognized risk analysis method (EBIOS RM, ISO 27005), linked to the 10 measures of Article 21 and the ReCyF framework, to a typical critical system.<\/li>
  • Classify an incident according to defined criteria, and apply the notification procedure within the required deadlines.<\/li>
  • Map critical suppliers and secure the contractual relationship binding them to the organization.<\/li>
  • Assess and calibrate security measures according to the organization’s size, criticality and status (essential or important entity), based on the principle of proportionality.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t

    TRAINING METHODS<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    This training alternates interactive presentations and practical workshops. The introductory module draws on key figures and recent cases to anchor the stakes before addressing the regulations. The following modules are based on hands-on exercises and a contrasting case study leading to a group discussion facilitated by the trainer.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t

    ASSESSMENT METHOD<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    The effective mastery of all the learning objectives will be assessed through a quiz (summative assessment).<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t

    PROGRAMME<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    Sequence 1: Introduction to NIS2<\/strong><\/p>

    • Identify the scope of application of NIS2 (sectors and entities concerned), and distinguish the status of essential and important entity, as well as the cascading effect through client organizations.<\/li>
    • Describe the main pillars of the text (governance, risk management, incident notification).<\/li><\/ul>

      Sequence 2: Who owns what, positioning yourself within the chain of responsibility<\/strong><\/p>

      • Distinguish the division of roles between management, the security function, legal, business units and external providers.<\/li>
      • Apply a RACI grid to the main NIS2 obligations to clarify who decides, who executes, and who validates.<\/li>
      • Identify how to distribute the compliance workload in an organization without a dedicated CISO, without depending on a position that does not exist.<\/li><\/ul>

        Sequence 3: Risk management framework<\/strong><\/p>

        • Explain the key principles of risk analysis (EBIOS RM, ISO 27005).<\/li>
        • Link the 10 risk management measures of Article 21 to their breakdown into 20 concrete objectives within ANSSI’s ReCyF framework (common level for essential and important entities, reinforced level for essential entities).<\/li>
        • Distinguish a mandatory security objective from a substitutable acceptable means of compliance, to avoid confusing what is required with what remains the organization’s choice.<\/li>
        • Apply the method to map the risks of a typical critical system (hands-on exercise).<\/li><\/ul>

          Sequence 4: Incident notification in practice<\/strong><\/p>

          • Differentiate the criteria used to classify an incident as significant.<\/li>
          • Identify the deadlines to be met (early warning within 24h, notification within 72h, final report within 1 month) and each party’s role in the notification chain.<\/li>
          • Apply the classification and notification procedure to a simulated case (workshop).<\/li><\/ul>

            Sequence 5: Securing the supply chain<\/strong><\/p>

            • Apply a method for mapping suppliers and providers according to their criticality.<\/li>
            • Identify the contractual clauses to include, and the requirements to cascade down to one’s own subcontractors.<\/li>
            • Explain, based on the cascading effect, what a regulated client organization can require from a supplier not directly subject to NIS2.<\/li><\/ul>

              Sequence 6: Sizing technical measures, the principle of proportionality<\/strong><\/p>

              • Explain the principle of proportionality within Article 21 and the ReCyF framework.<\/li>
              • Apply a sizing grid for measures according to the organization’s size, criticality and status (essential or important entity).<\/li>
              • Translate a technical measure into a risk\/cost argument, and justify an investment request presentable to the executive committee.<\/li>
              • Distinguish a disproportionate over-investment from a minimal setup that is insufficient given the risk profile.<\/li><\/ul>

                Updated on 3 July 2026<\/strong><\/em><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

                \n\t\t\t
                \n\t\t\t\t\t\t
                \n\t\t\t\t
                \n\t\t\t\t\t\n\t\t\n\t\t
                \n\n\t\t\t

                Training Center<\/h2>\n\t\t\t\t\t\t\t
                \n\t\t\t\t\t

                PARIS
                \n\n\n121 rue d'Aguesseau (centre d'affaires Emergence)
                \n 92 100 Boulogne Billancourt
                \n
                \nRegistered under number: 11922630392.<\/p>\n\t\t\t\t<\/div>\n\t\t\t\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

                \n\t\t\t\t
                \n\t\t\t\t\t