NIS2 & CER - Protection and Resilience in Critical Operations.

After completing the program, the student should have knowledge of Under NIS2, which cybersecurity requirements apply under Swedish law and how they affect socially important and critical services. Under NIS2, how risk management is used to handle cyber threats such as ransomware, data breaches and network attacks. Under the CER Directive, which requirements apply to physical security in the face of threats such as sabotage, natural disasters and supply disruptions. Under the CER Directive, how risk assessments are carried out to identify physical vulnerabilities and critical dependencies. Under NIS2, how incident management and reporting processes work for cyber incidents. Under the CER Directive, how organizations should handle physical incidents and ensure business continuity. Under NIS2, which technical protective measures are used, such as encryption, firewalls and secure authentication. Under the CER Directive, which physical protective measures are used, such as surveillance and access control. Under NIS2, how documentation of and compliance with cybersecurity regulations should be established. Under the CER Directive, how resilience strategies are designed, including crisis planning and security exercises. Under NIS2 and the CER Directive, how the regulations affect sectors such as energy, transport and healthcare, and how they interact. After completing the program, the student should have the skills to Under NIS2, perform risk analyses and identify vulnerabilities in IT infrastructure. Under the CER Directive, carry out security assessments of critical physical facilities and resources. Under NIS2, implement cybersecurity incident management through intrusion detection and rapid reporting. Under the CER Directive, develop and implement crisis preparedness plans to handle physical threats and disruptions. Under NIS2, support management and IT managers in implementing security measures and policies. Under the CER Directive, support security managers in introducing physical protective measures and resilience strategies. Under NIS2 and the CER Directive, coordinate incident management between cyber and physical threats. Under NIS2, conduct training sessions and workshops on information security and regulations. Under the CER Directive, carry out scenario-based exercises and simulations to test resilience against physical security threats. Under NIS2 and the CER Directive, identify and manage the interplay between IT security and physical security in complex environments. After completing the program, the student should have the competence to Under NIS2, implement and ensure compliance with cybersecurity strategies in organizations. Under the CER Directive, interpret and apply resilience requirements for physical security and continuity. Under NIS2, analyze cybersecurity risks and propose technical and organizational measures. Under the CER Directive, carry out GAP analyses of resilience and identify security gaps in physical infrastructure. Under NIS2 and the CER Directive, create and carry out GAP analyses covering both cyber and physical security risks. Under NIS2 and the CER Directive, collaborate with authorities and industry actors to ensure compliance with the directives. Under NIS2 and the CER Directive, develop and lead organizations' security policies and strategic security plans. Under NIS2 and the CER Directive, analyze the organization's dependencies on both IT and physical security to ensure comprehensive protection.