NIS2 & DORA Compliance Engineering
Turn regulatory obligations into controls, pipelines and evidence that survive an examination. Learners map legal text to testable control statements, build an ICT third-party register that holds up under scrutiny, automate incident classification and reporting, and replace screenshot debt with evidence by query. The output is a gap assessment and remediation plan sequenced against real enforcement dates.
What this course covers.
6 modules, 42 named skill atoms. Expand any module to see them.
1Obligation To Control Mapping7 skill atoms
2ICT Third-Party Register7 skill atoms
3Incident Classification Pipeline7 skill atoms
4Evidence Automation7 skill atoms
5Resilience Testing Obligations7 skill atoms
6Gap Assessment & Remediation7 skill atoms
SEC-307 in the role journeys.
This course appears in 2 of our 45 role journeys. Here is what a learner takes immediately before and after it in each.
Roles this course serves
This course is authored to band B4.
Every course we run is written to one rung of the CASI ladder, so a plan can be assembled to take a team from where they are to where they need to be.
What do B1–B6 mean?The CASI Capability Ladder — click to expand
Every course targets a band on the CASI Capability Ladder — our six-band proficiency scale, anchored to open standards (O*NET, ESCO, NICE, NIST AI RMF, Bloom's). A band tells you how deep a course goes, and what evidence proves it.
A note on B6. Courses in this catalog target B1–B5. B6 is not taught — it is recognised, through a portfolio and a panel, once someone is setting direction for others. Every journey here is built to land a learner at B5.
Other Security courses at this level.
AWS Security Engineering
Azure Security Engineering
GCP Security Engineering
Cloud Security Posture Management (CSPM) & Hardening
Secrets Management & Cross-Cloud Federation
SaaS Security Posture Management (SSPM)
Run SEC-307 for your team.
This course runs at several lengths depending on how deep you need to go and how much of it your people already have. Tell us who is being trained and we will scope it.