simlerBoard training · Cyberbeveiligingswet
Three hours that prepare your board for the real crisis
From 15 August 2026 the Dutch Cyberbeveiligingswet makes board members personally accountable — including a mandatory training. In the first ninety minutes your board learns what NIS2 requires, where your organization stands and what you are liable for as a board member. Then you practice a realistic cyber incident together, on site or online, and close with an audit-ready certificate for every board member.
€1,495 introductory price (regularly €2,950), excl. VAT · credited in full against a subscription within 60 days
Prefer to agree a date first, get a quote or pay by invoice? Email us →- Location
- At your office or online
- Participants
- The full board
- Duration
- 3 hours, one half-day session
- Outcome
- Certificate per board member
- 00:00
Welcome and the aim of the session
What you will know and be able to do after three hours — and how the session is built: knowledge first, then practice.
- 00:10
What are NIS2 and the Cyberbeveiligingswet?
Why the law exists, who falls under it (essential and important entities), what the duty of care means and how the reporting duty works: 24 hours, 72 hours, one month.
- 00:35
Your responsibility as a board member
Approve, oversee and demonstrably train. When you are personally liable, and what the regulator can do: binding instructions, fines of up to €10 million or 2% of turnover, and measures against board members themselves.
- 01:00
Where does your organization stand? The baseline assessment
Together we go through the NIS2 measures: what is in place, what you can demonstrate and where the gaps are. You leave with an overview of what you already meet and what you don't yet.
- 01:30
Break
A breather — then we practice.
- 01:40
The scenario starts
A realistic crisis in your organization unfolds — built from your sector, systems and context, not from a stock script.
- 01:55
Escalation
The pressure rises: customers call, a journalist knows more than you do, the supply chain wants answers. Who decides what?
- 02:10
The reporting-duty moment
The 24-hour clock is running. Together you decide: is this a significant incident, what do we report to the CSIRT, and who signs off?
- 02:25
Deciding under uncertainty
Ransom, communications, legal position, continuity — the trade-offs the board is actually at the table for.
- 02:40
Debrief and next steps
What went well, where the gaps in plans and mandates are, and how that compares with the baseline from the first half. We record the follow-up actions.
- 03:00
Certificate
Every participant receives an audit-ready participation certificate — the evidence for the legal training duty.
What the law asks of your board
The Cyberbeveiligingswet places three duties directly on the board — not on the IT department.
Approve
The board approves the organization's cybersecurity measures and carries the responsibility for them.
Oversee
The board oversees the implementation of those measures — looking away is no longer an option.
Demonstrably train
Board members must complete training to be able to assess cyber risks. When they fall short, they are personally accountable.
Evidence that survives an audit
After the session every board member receives a personal participation certificate: name, role, date, duration and the topics covered — NIS2 and the Cyberbeveiligingswet, board liability, the duty of care, the reporting duty and crisis management. Exactly what you show a regulator or auditor as evidence of the legal training duty. No scores or grades; demonstrable participation.
Working with a consultancy or MSSP? The training is also delivered through partners — they know your environment, we run the exercise and issue the certificate.
After that, your board keeps practicing
With Boardroom Readiness, your board works through a cyber crisis in 30 to 60 minutes, round by round, as often as you like. The debrief records what was decided and what is still open. Take out a subscription within 60 days and we credit the training in full.
Schedule the training for your board
Book the training, then pick a date with your board. Prefer to talk first, get a quote or pay by invoice? Email us — you will hear back within one business day.
First want to know whether the law applies to you? Take the free Cbw check →