SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals
SEC595Cyber Defense
SANS Community Benefits
Connect, learn, and share with other cybersecurity professionals
Navigating DORA and NIS2 Compliance for Financial Sector Organisations in the EU
Catch-up on this Q&A webcast session with SANS’ Brian Correia and ENISA’s Senior Cyber Policy Expert, Jurgita Skritaitė which took place on 13th May 2025. In this session we covered:
- Who falls within scope (including global providers)
- Key deadlines, enforcement, and jurisdictional reach
- Practical steps to support operational resilience and third-party compliance
NIS2 Directive Awareness and Readiness Report: a SANS Survey
SANS recently conducted a survey on global organisations' awareness and preparedness for implementing measures as a result of the new EU regulation NIS2. Our newly released white paper not only highlights findings on organizational readiness and awareness, but also offers insights into modern threat capabilities and provides actionable recommendations for effective compliance strategies and training requirements. We also hosted a webinar on October 28th during which co-author Bojan Zdrnja took viewers through the report findings and SANS recommendations.
Difference between NIS & NIS2
The NIS Directive, adopted in 2016, was the first EU-wide legislation on cybersecurity. Its main goal was to establish a common level of security for network and information systems across the European Union. The NIS2 Directive is an updated and more comprehensive version of the NIS Directive, aiming to address the shortcomings of the original legislation and to adapt to the evolving digital landscape. We’ve listed the most important differences between these two directives in a useful infographic.
Mapping Your Path Using The ECSF And NIS2
The European Cybersecurity Skills Framework (ECSF) is a practical tool to support the identification and articulation of tasks, competencies, skills and knowledge associated with the roles of European cybersecurity professionals. To enable you to see which skills are required for these roles and what courses and exercises might help you obtain these skills, we have created an easy-to-use mapping tool for you to discover your potential next training opportunity.
What You Need to Know about the NIS2 Directive: Part of the SANS Compliance Countdown Series
Join ENISA, the European Union’s Agency for Cybersecurity, to learn how to prepare for NIS2 incident reporting and security measure requirements, what it means for organizations doing business in the EU, and the skills needed for compliance across critical sectors.
Part A - General introduction to the NIS2
• Main pillars of the NIS2 Directive
• Requirements for companies in critical sectors
• NIS2 Incident reporting and security measures
Part B - Cybersecurity skills for the NIS2
• ENISA cybersecurity skills framework
• Mapping skills to the NIS2
Marnix Dekker, Head of Sector NIS answers your questions to make sure you are as best prepared as possible to comply with the new requirements by October 17th, 2024.
Elevating Cybersecurity: The SANS-ISS Partnership and the Future of Cyber Resilience
In this case study, explore how ISS, a global facility services provider, collaborates with SANS to enhance its cybersecurity capabilities across 28 countries. The video delves into the challenges of unifying diverse IT and security departments and highlights the critical role of ongoing training to adapt to rapid technological and criminal developments. Through firsthand accounts, learn about the implementation of the SANS maturity model, the strategic benefits of SANS training programs, and how ISS is leveraging this partnership to boost corporate resilience and attract top talent in cybersecurity. Discover the pivotal role of human factors in cybersecurity and how ISS is strengthening its defenses not just technologically, but also through skilled and certified personnel.
Secure Compliance Globally
NIS2 is just one of many recent regulations that will have global repercussions. The recent US SEC ruling on Incident Reporting and Management oversight and the DOD 8140.3 ruling, all have implications for organisations and government instances on a global level.