Cyber security and compliance training for companies – funded and online.
Audit-ready instead of an awareness slide.
Seven modules, online in moderated live lessons, with duration and scope tailored to your business. Your employees become capable of acting at the interfaces of IT security, data protection and compliance – from GDPR and ISO 27001 to liability avoidance and audit-proof processes.
- ✓For the roles it really affects. Designed for employees in IT, administration, organisation, administrative functions and project work – not only for specialists.
- ✓Audit-ready instead of an awareness slide. IKS, audit preparation, whistleblower protection and business continuity are an integral part of the curriculum.
- ✓Eligible for funding under the Qualification Opportunities Act (QCG). We check free of charge which funding is an option for your company.
The goal is the ability to act in future-proof roles at the interfaces of IT, data protection and compliance.
The training programme is aimed at employees in IT, administration, organisation, administrative functions and project work – precisely the functions where security and compliance requirements are actually decided in day-to-day business.
Why a one-off IT security training rarely changes anything
Regulation grows faster than in-house knowledge. Three patterns regularly cost companies time, money and, in the worst case, their exemption from liability – and none of them can be resolved in a one-day seminar.
Policies exist, behaviour does not change
The data protection manual sits in the intranet, the DPA review stalls and cloud services are introduced outside the process. But in an audit it is not the document that counts, it is the evidence of lived practice.
Security is seen as a purely IT topic
Phishing, misdirected emails and unclear access rights rarely originate in IT, but in administration, procurement and project work. As long as only IT is trained, the biggest gateway stays open.
In an emergency, the routine is missing
Reporting deadlines for data protection incidents, business continuity, whistleblower protection: when these processes are first thought through in an emergency, liability risks arise that could have been avoided.
Compliance training or training programme? The difference decides the impact.
Whether you are looking for a compliance training, an IT security training or a cyber security training: both formats have their place – they simply solve different problems. This comparison helps you decide.
The one-off training session
The right choice when annual briefing obligations must be met or an acute trigger calls for quick awareness-raising.
The structured training programme
The right choice when roles at the interfaces of IT, data protection and compliance are to be filled permanently – and when funding should lower your share of the cost.
Seven modules – from ISO 27001 training to compliance practice
From data protection in practice via technical safeguards and corporate compliance to processes, collaboration and HR topics – the fields where security actually hinges in everyday work. Module durations and hours are agreed jointly with you.
Data Protection
Cyber Security
Corporate Compliance
Sustainability
Agile Process Design
Collaboration
People & Culture
Module tests & practical project
IT security training: how the programme runs
Taught synchronously, supported digitally, and with a proof of achievement that targets application rather than memorisation.
Key facts
Teaching & assessment
Audience & goal
What your company ends up with
Not only trained employees, but four results that keep working in the business.
Funded cyber security training: what your company actually pays
The programme is eligible for funding under the Qualification Opportunities Act (QCG). Through it, the Federal Employment Agency supports employee training, in some cases including a subsidy on remuneration. How high the funding is depends on company size, participants' qualifications and the programme.
From the first call to the start of your IT security training programme
Clarify needs
A short call: which areas, how many employees, which compliance requirements are pending.
Check funding options
Together with BES Academy we clarify which funding under the QCG is an option for your company.
Prepare the documents
We support the preparation of the documents for the Federal Employment Agency. The agency decides on the application.
Scope and start
Modules, duration and effort are aligned with your business, then onboarding and the course start follow. A start is possible monthly.
Compliance training and IT security: the key questions
Who is the training programme suitable for?
For employees in IT, administration, organisation, administrative functions and project work. The scope is deliberately broader than a pure IT security training, because data protection and compliance decisions in daily work are mostly made outside the IT department.
What distinguishes the training programme from a classic cyber security training?
A cyber security or IT security training raises awareness point by point, usually in one day. This training programme builds the ability to act over several months: GDPR and BDSG in contract practice, ISO 27001 and IT-Grundschutz, risk analysis, business continuity, internal control system and audit preparation – each with application to your own case instead of a slide deck. For annual mandatory briefings the short training remains the right format; for permanently filled roles it is not enough.
Is a training on ISO 27001 included?
Yes. Module 2 covers ISO 27001 together with BSI IT-Grundschutz, risk analysis, phishing defence and business continuity management. The focus is on understanding the standard's requirements and implementing them in your own company – the training programme does not replace auditor qualification, but prepares you to contribute to an information security management system.
How much time does it take – and can it be adjusted?
We agree that together with you. The programme runs in synchronous live lessons, complemented by self-study phases on the learning platform; duration, module scope and weekly hours are flexible. Depending on how much time your employees can invest alongside their day-to-day work, the programme runs more compactly or over a longer period with a lower weekly load.
When can a group start?
A start is possible monthly, as soon as needs and funding are clarified. Teaching takes place in an exclusive group size: deliberately in a small setting, so that moderated discussion and work on your own case genuinely have room in the live lessons.
Is the training programme funded?
The programme is eligible for funding under the Qualification Opportunities Act (QCG). Through it, the Federal Employment Agency funds employee training, in some cases with a subsidy on remuneration. Whether and in what amount funding applies depends on company size, participants' qualifications and the programme. We check this free of charge.
How is learning success evidenced?
Through module tests on the individual topic areas and a practical project, which is worked on a real case from your own company and accompanied by coaching sessions.
Why are sustainability and HR part of an IT security training programme?
Because compliance in a company does not end at the server room door. ESG reporting obligations, procurement policies, audit-proof processes and the question of how new employees are onboarded securely belong to the same governance structures. Modules 4 to 7 close exactly this gap.
Book a no-obligation consultation now
Talk to us about:
- Recruiting
- Wachstumsstrategie
- Talentgewinnung
- Beratung