Leadership pack: prime targets

Complete plan

The reflexes of leaders and their assistants: cut down what is public about you, travel with a dedicated device, agree a verification word, beat the cloned voice and the urgent transfer, and take on the role NIS2 gives to management.

  • 10 min
  • 4 modules
  • 13-question check
  • English · Français
  • Attestation

You will be able to

  • Understand why leaders and their assistants are targeted, and how their public exposure is used to imitate them
  • Know that a voice, an image or an email can be generated by AI
  • Recognise CEO fraud and fake-supplier (bank detail change) fraud
  • Name the three duties in Article 20: approve, oversee, get trained

Programme

4 modules · 10 min
  1. You are the target 3 min
    • Understand why leaders and their assistants are targeted, and how their public exposure is used to imitate them
    • Travel on sensitive trips with a dedicated device holding only the data needed, and have it checked on return
    • Agree a verification word with your assistant in advance, for any unusual request
  2. Deepfakes: the call-back still works 2 min
    • Know that a voice, an image or an email can be generated by AI
    • Stop relying on the old clues: typos, robotic voice
    • Apply the call-back on a known number, the verification question and the second approval, including for a change of bank details
  3. The urgent transfer 2 min
    • Recognise CEO fraud and fake-supplier (bank detail change) fraud
    • Apply the callback rule on a known number and the second approval
    • Report fast, even after a mistake
  4. NIS2: the leader's role 3 min
    • Name the three duties in Article 20: approve, oversee, get trained
    • Know what the directive provides for breaches: supervision, measures, fines, leaders' liability
    • Know what delegating to the CIO does not transfer
  5. Knowledge check

    13 questions, pass mark 80 %. Explanations after each answer; you can try again.

  6. Attestation

    One per person, with the date, the score and the frameworks covered — anyone can check it online with its code.

Version 1 · updated October 6, 2026

On the same topics

Course Essentials plan

Security essentials

The 5 security reflexes every employee needs: spot a phishing email, deny an unexpected MFA prompt, one password per site, call back before any urgent transfer, report ransomware early.

  • 10 min
  • 6 modules
  • EN · FR
NIS2 Art. 21(2)(g)GDPR Art. 32ISO/IEC 27001 A.6.3
See the content →
Course Essentials plan

GDPR essentials

Five short modules for all staff: recognise personal data, collect only what is needed, send to the right recipient, report a breach, pass on a GDPR request.

  • 9 min
  • 5 modules
  • EN · FR
GDPR Art. 4(1), 9, 39(1)(b)ISO/IEC 27001 A.5.34, A.6.3
See the content →
Course Complete plan

NIS2 for management

Five modules for executives, the executive committee and the board: whether the company is in scope, leaders' personal role, the ten measures and the questions to ask, incident reporting, suppliers and proof of oversight.

  • 15 min
  • 5 modules
  • EN · FR
NIS2 Art. 2, 3, 20(2)GDPR Art. 33ISO/IEC 27001 4.3
See the content →