NIS-2 Training for Software Developers
The NIS2 Directive requires security measures to be addressed during software development and maintenance and calls for fundamental training in information security. This training course implements these requirements in a practical manner tailored to a technical target audience. Participants will learn how to comply with the requirements of the NIS2 Directive and to implement appropriate measures and activities in real-world scenarios.
At a glance
General information
- Three days of practice-based training (on-site or remote)
- Flexible training agenda with customisable technical focus areas
Target group
Software developers
Application examples
Overview of security activities in accordance with the NIS2 Directive
Description
With the increasing importance of software systems for digital infrastructures comes an increase in the number of threats to which these systems are exposed. If security issues are neglected, or not taken into account from the very outset, it is often only a matter of time until they cause problems.
The EU’s NIS2 Directive therefore increases the requirements for a variety of companies and calls for the more comprehensive and consistent implementation of information security. One of the Directive’s key elements is the specialist training of software developers. Our NIS2 Training Course for Software Developers enables companies to address this requirement while, at the same time, improving the level of security awareness within their development teams and the quality of the systems they develop.
This training course is thus designed to help companies achieve both NIS2 compliance and long-term added value for their business models. After all, reputational damage (and the associated loss of trust) caused by negative reporting poses as great a risk to systems and companies as the vulnerabilities, attacks, and data losses themselves.
Our NIS2 Training Course for Software Developers provides a fundamental overview of all the relevant phases of a secure software development process.
Participants will learn how to evaluate the security of their software more effectively and to implement appropriate measures and activities in real-world scenarios. The training course is based on our own experience in software development projects, enabling us to share real-life best practices.
Agenda
- Introduction to Security: Motivation and Security Goals
- Context: NIS2 and Software Security
- Secure Design: Threat Modelling, Security Requirements, Risk Assessment
- Secure Coding: Security Patterns, Cryptography, Coding Guidelines
- Secure Testing: Static and Dynamic Security Testing, Fuzzing, Test Tooling
- Secure Operations: Secrets Management, Logging, Monitoring, Alerting, Incident Management
Typical questions we answer:
- What role do developers play in the practical implementation of NIS2 requirements?
- How can software developers identify and assess threats and risks to their software?
- What security requirements should be taken into account when developing software and how can they be implemented?
- What best practices exist for implementing authentication, authorisation, or cryptographic processes?
- What tools and methods are available for testing and monitoring software security?
- How can security activities be integrated into the agile software development life cycle, and which regulatory requirements must be taken into account?
- signed certificate of completion
- in-house training
- Customization available (agenda, tech stack, language, etc.)
- small training groups
Why inovex Academy?
Our offerThe inovex Academy has set itself the task of passing on knowledge about methods and technologies that we already use successfully in our projects.
Curated content
Our trainers create a customized training offer based on your requirements.
Customizable tech stack
In exclusive trainings, we can consider your tech stack for the training content.
Individual assistance
If needed, we can tailor the training to a specific use case of your company and work directly based on your data.
Trainers
Our trainers are field-tested experts in their areas of expertise. Through their work in projects, they expand their knowledge day by day and pass on this know-how in their trainings - application-oriented and practice-oriented.
Clemens Hübner
Simon Dreher
Dr Michael Gerhäuser
Dr. Michael Gerhäuser has been working professionally as a software developer since 2014 and joined the inovex team in 2022. He specialises in the design and implementation of web applications, both frontend and backend with operations and monitoring. He is also interested in topics such as software performance and web application security. In his private life, Michael is involved in the local software craftsmanship community by organising a Rust Meetup and as a member of the organisation team of a local barcamp.
Our training approach
From the needs analysis to the awarding of certificates, we offer customized training courses, flexibly designed and carried out according to your requirements.
If you are interested in in-house training, we will start by identifying your needs and discussing your objectives. This discussion forms the basis for an initial offer.
As soon as the framework data has been clarified, our trainers start adapting the training content. Many of our training courses have a modular structure and offer the opportunity to design the agenda flexibly. Training courses that prepare for certifications, on the other hand, are less flexible. Here, however, you can set the content focus according to your wishes.
You will receive all relevant information in advance of the training. The training will then take place in the room of your choice and at the agreed time. Our trainers will adapt to your requirements.
After completing the training, all participants receive a certificate confirming their participation. You will also have the opportunity to give us feedback on the content and the course. We are always happy to receive praise and suggestions for improvement.