The standard course is 2 full days of training (approx. 16 hours total) in the live-online or in-person format

. Typically, we run from 9 AM to 5 PM each day (with appropriate breaks). For 1-on-1 trainings, the schedule is more flexible – you could do four 4-hour sessions, eight 2-hour sessions, or any arrangement you need, as long as the total content is covered. Some public batches are also offered as weekend courses (spread over two Saturdays, for instance). In some cases, we offer an extended 3-day version (with extra labs or slower pace) if there is demand; our training calendar will list all upcoming batches and their durations. If you have specific scheduling needs, our team can work to accommodate them. The key is, we ensure the full curriculum is delivered whether it’s two intense days or a slightly extended schedule.

Yes! We have fully updated our course to cover NIST CSF Version 2.0 (released 2024). This includes the new “Govern” function and governance layer that NIST added, as well as enhanced content on supply chain risk management and continuous improvement as outlined in CSF 2.0.

. We still teach the core concepts from 1.1 (since 2.0 builds on them), but we explicitly highlight what’s new in 2.0 throughout the modules. You will learn how the 5-function model expands to 6 functions, what additional categories or guidance have been introduced, and how to implement those new elements. Rest assured, you’re learning the most current version of the framework. And if NIST updates the framework again, we will update our materials accordingly and inform alumni of the changes.

Not necessarily. This course is designed to be accessible to both technical and non-technical professionals. While an IT or cybersecurity background is helpful, we start with the basics of cybersecurity risk management so everyone has the context. There’s no coding or hands-on hacking involved – the focus is on management and process. If you understand basic security concepts (even at a high level), you’ll do fine. For example, knowing what things like firewalls, incident response, or risk assessment means is a plus, but we will explain these in the framework context as needed. In fact, NIST CSF is often used by managers and consultants who are not deeply technical but need to coordinate with technical teams. As noted earlier, there are no formal prerequisites – even newcomers can grasp it with the help of our instructors. We’ve had participants from purely management or audit backgrounds who succeeded in the course. If you are concerned, we can provide introductory materials so you can familiarize yourself with some terminology beforehand.

 We understand that professionals have busy schedules. If you’re enrolled in a live online batch and you miss a session, don’t worry – we can provide you with a recording of the session and any class notes. Additionally, our instructors can spend a bit of time with you to recap what was covered or answer questions on the missed content. For time zone issues, we schedule multiple batches (for example, one catering to North America time, one for Asia-Pacific, etc.). You can choose a batch that best aligns with your zone. If none of the scheduled times work for you, our 1-on-1 training option is the ideal solution, as you can set sessions at whatever time suits you (even evenings or weekends). We strive to be flexible: in corporate batches, we often split sessions to half-days to accommodate work schedules. So, in summary, missing a session isn’t a problem – we’ll make sure you still get the content, and we offer various timings or custom schedules to minimize conflicts.

After you finish the course, our career support team will get in touch to start the placement process. We begin by working with you on your resume and interview prep (if you need it). When you’re ready to job hunt, we leverage our network to find suitable openings. We’ll notify you of relevant job opportunities (e.g., a partner company is seeking a security analyst familiar with frameworks, or an alumnus knows of an opening in their organization). With your permission, we forward your profile to recruiters or hiring managers we collaborate with. We also provide references based on your course performance (if a reference letter or verification is needed for job applications). The assistance is open-ended – meaning we don’t cut you off after a certain time. Whether it takes you 1 month or 1 year to find the right job, you can continue to tap into our services. Keep in mind, job placement also depends on your effort (applying to jobs, interviewing, etc.), but we’ll be there to guide and support you. Many of our students have landed roles in governance, risk, and compliance thanks to this combined effort. While we cannot guarantee a job, we do guarantee giving you the best support possible to achieve your career goals.

Yes, if you opt for a corporate training session, we can customize the program. In a private corporate course, we have the freedom to discuss your organization’s specific context. For instance, if your company is in a certain industry (say healthcare), we can tailor examples to that context or even align some content with HIPAA regulations. We can also spend more time on certain modules that are more relevant to your team (for example, if you recently adopted ISO 27001, we can emphasize the integration module more). The core syllabus will be followed, but there’s room to focus on what matters most to you. We can’t change the framework itself, of course, but we can adapt the delivery. Additionally, proprietary issues permitting, we sometimes review parts of the organization’s current cybersecurity state and workshop how NIST CSF could enhance it – essentially a mini-consulting element within the training. All of this can be discussed in a pre-training call with your team to ensure the training meets your expectations. Our goal is to make the learning as applicable as possible for your team’s daily work.