{"id":40941,"date":"2026-10-02T10:00:00","date_gmt":"2026-10-02T10:00:00","guid":{"rendered":"https:\/\/grapenordic.com\/?p=40941"},"modified":"2026-11-09T10:18:04","modified_gmt":"2026-11-09T10:18:04","slug":"nis2-employee-training","status":"publish","type":"post","link":"https:\/\/grapenordic.com\/en\/nis2-employee-training\/","title":{"rendered":"What does your company need to know about NIS2 and employee training?"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">An employee in the finance department receives an email from the \u201cCEO\u201d: A supplier must be paid today, the amount is substantial, and the matter is confidential. Whether the money is transferred depends on what happens next. Does the employee act under pressure, or pause and call the CEO to verify the request?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is the human side of cybersecurity. And it is part of NIS2.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In this article, we explain what NIS2 requires when it comes to training employees and management, how your company can document its efforts, and which decisions you should make before assigning the first course.<\/p>\n\n\n\n<h2 id=\"h-what-is-nis2\" class=\"wp-block-heading\">What is NIS2?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">NIS2 is the EU directive designed to establish a high common level of cybersecurity across the European Union. It applies to public and private organisations in a range of critical sectors and has been implemented in Denmark through the Danish NIS2 Act, which entered into force on 1 July 2025.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The legislation includes requirements relating to cybersecurity risk management, incident handling, supply chain security and management responsibility. You can read the <a href=\"https:\/\/www.retsinformation.dk\/eli\/lta\/2025\/434\/pdf\" target=\"_blank\" rel=\"noopener\">Danish NIS2 Act on Retsinformation<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Whether your company is covered depends on factors such as its sector, size and activities. The <a href=\"https:\/\/samsik.dk\/nis2\/\" target=\"_blank\" rel=\"noopener\">Danish Agency for Societal Security\u2019s NIS2 website<\/a> provides official guidance as well as access to NIS2tjek.dk, which can help with an initial assessment.<\/p>\n\n\n\n<h2 id=\"h-what-does-nis2-require-from-employee-training\" class=\"wp-block-heading\">What does NIS2 require from employee training?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The requirement is set out in section 6(1)(7) of the Danish NIS2 Act, where basic cyber hygiene practices and cybersecurity training are included among the measures that covered organisations must implement.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The law does not prescribe one particular course or a fixed training interval. Instead, companies are expected to consider their own risks and identify the working situations in which employee actions can affect security.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For most employees, relevant training topics will include phishing and fraudulent messages, the secure use of passwords and multi-factor authentication, the handling of sensitive information, and the reporting of potential security incidents. Some roles may need more specialised knowledge relating to payments, personal data or privileged access to company systems.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The content needs to be useful during an ordinary working day. What should an employee do when a supplier suddenly changes its bank details? How can an unusual message from a senior manager be verified? And who should be contacted if someone has already clicked a suspicious link?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Clear answers to questions like these are often more valuable than a lengthy presentation of the company\u2019s security policy.<\/p>\n\n\n\n<h2 id=\"h-employees-do-not-all-face-the-same-risks\" class=\"wp-block-heading\">Employees do not all face the same risks<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">An employee in finance may receive a fraudulent payment request, while HR regularly handles personal information that can be valuable to an attacker. Customer service employees communicate with people outside the organisation every day, and system administrators may have access to critical systems where a compromised account could have serious consequences.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Everyone needs a common level of security awareness, but the training should also reflect the risks associated with each role.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For many companies, a practical starting point is to provide basic training to all relevant employees and add targeted content for roles with additional responsibility or a higher level of risk. New employees can complete the training as part of onboarding, while employees who receive new responsibilities or system access can be assigned supplementary modules.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This model is relatively straightforward to manage while still allowing the company to explain why different employee groups receive different training.<\/p>\n\n\n\n<h2 id=\"h-management-has-its-own-responsibilities\" class=\"wp-block-heading\">Management has its own responsibilities<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Section 7(2) of the Danish NIS2 Act requires the management body to participate in relevant training and to encourage the regular provision of appropriate training to employees.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Management training should reflect the responsibilities that come with the role. Employee training will typically focus on decisions made in specific working situations, whereas management must understand the company\u2019s principal cybersecurity risks, prioritise appropriate security measures, and follow up on whether risk management is working as intended.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That requires a different perspective.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Management should understand how responsibilities are distributed, which risks the company has accepted, and which questions to ask about security incidents, suppliers and training activities. The <a href=\"https:\/\/samsik.dk\/wp-content\/uploads\/2025\/06\/SAMSIK-vejledning-om-ledelsens-rolle-og-opgaver-maj-2025.pdf\" target=\"_blank\" rel=\"noopener\">Danish Agency for Societal Security\u2019s guidance on the role and responsibilities of management<\/a> provides further detail.<\/p>\n\n\n\n<h2 id=\"h-what-should-your-company-be-able-to-document\" class=\"wp-block-heading\">What should your company be able to document?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Your company should be able to show who was assigned the training, who completed it, when it was completed, and which content or course version each employee received. There should also be an established process for reminders and follow-up, so incomplete training does not simply disappear into a report.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The documentation becomes more useful when it is connected to the company\u2019s risk assessment. If the finance department is particularly exposed to CEO fraud and fraudulent invoices, for instance, the company should be able to show how the training addresses that risk and why this employee group may receive different content from the rest of the organisation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A learning management system can bring assignments, reminders, course versions and completion data together, giving HR, compliance and IT a shared overview. Before choosing a solution, however, check which information the system records, how long that information is retained, and how it can be exported for an internal review or external audit.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A completion rate tells you whether employees have finished the course. Test results, phishing simulations and the number of suspicious messages reported by employees can provide a broader picture of whether the training is influencing behaviour.<\/p>\n\n\n\n<h2 id=\"h-how-to-get-started\" class=\"wp-block-heading\">How to get started<\/h2>\n\n\n\n<h3 id=\"h-assign-clear-ownership\" class=\"wp-block-heading\">Assign clear ownership<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Several functions will usually be involved in the training programme. IT or information security can define the relevant risks and security requirements, while HR or L&amp;D can manage assignment, communication and follow-up. Compliance can establish the documentation requirements and check whether the agreed process is being followed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">There should still be one clear owner. Without overall responsibility, training can easily fall between departments, particularly when the content needs updating or incomplete assignments require follow-up.<\/p>\n\n\n\n<h3 id=\"h-define-the-desired-behaviour\" class=\"wp-block-heading\">Define the desired behaviour<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Describe as precisely as possible what an employee should be able to do after completing the training. A learning objective could read:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The employee can recognise common signs of phishing, verify a suspicious request through a separate communication channel, and report it through the company\u2019s approved process.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A specific learning objective makes it easier to select the right content, develop relevant scenarios and assess whether employees have understood the message.<\/p>\n\n\n\n<h3 id=\"h-use-situations-employees-recognise\" class=\"wp-block-heading\">Use situations employees recognise<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Realistic scenarios are easier to apply than abstract security rules. Use situations that employees are likely to encounter: a supplier changing its bank details, a fake login page, an urgent message apparently sent by management, or an unknown person requesting confidential information.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Grape\u2019s <a href=\"https:\/\/grapenordic.com\/en\/online-courses\/cyber-security\/\">IT security course for employees<\/a> was developed in collaboration with BDO. Its recommended programme consists of nine modules covering subjects such as phishing, passwords, mobile devices, data sharing and security breaches, and the content can be adapted to the organisation\u2019s audience and working situations.<\/p>\n\n\n\n<h3 id=\"h-plan-the-follow-up-from-the-beginning\" class=\"wp-block-heading\">Plan the follow-up from the beginning<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The training can form part of the onboarding process and be repeated when employees receive new responsibilities or when the company changes its systems and working procedures. New attack methods, lessons from phishing simulations or an actual security incident may also show that certain topics need to be revisited.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">There is no single training interval that suits every organisation. The company should choose a frequency that reflects its risks and document why the chosen approach is appropriate.<\/p>\n\n\n\n<h2 id=\"h-who-should-own-the-training-programme\" class=\"wp-block-heading\">Who should own the training programme?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The answer depends on how the company is organised, but ownership often sits with information security, compliance, HR or L&amp;D. In most cases, the strongest setup is a collaborative one in which a single function holds overall responsibility while the others contribute specialist knowledge and practical support.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Information security understands the threat landscape. HR and L&amp;D know how to deliver training across the organisation, while compliance focuses on requirements, controls and documentation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Responsibilities, deadlines and follow-up procedures should be recorded. This keeps the programme moving and makes the process easier to explain during an internal review or external inspection.<\/p>\n\n\n\n<h2 id=\"h-can-you-use-your-existing-lms\" class=\"wp-block-heading\">Can you use your existing LMS?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">An existing learning management system can often be used to assign courses, send reminders and record completion. This has the advantage of giving employees a familiar platform while allowing security training data to become part of the company\u2019s wider learning reports.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Before implementation, check whether the course supports your LMS format, whether the course version is recorded, and whether reports can be broken down by team and role. Relevant data should also be exportable if the company later needs to document its training activities.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The technical setup should reflect the documentation you want to produce, rather than being chosen only because it allows the course to be launched quickly.<\/p>\n\n\n\n<h2 id=\"h-from-a-course-to-an-established-part-of-your-security-programme\" class=\"wp-block-heading\">From a course to an established part of your security programme<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Employee training can reduce the risk of an ordinary email or telephone call developing into a security incident. Its greatest impact comes when it is supported by clear reporting channels, technical security measures and management follow-up.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A course is therefore one part of the wider NIS2 programme. It gives employees a shared starting point, while the company\u2019s security also depends on whether people know where to turn when something seems wrong and whether the organisation responds quickly to their concerns.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Grape\u2019s online IT security course was developed with BDO and can be adapted to your company\u2019s working situations, audience and visual identity. The recommended programme includes nine modules covering topics from phishing and passwords to data sharing and the handling of security breaches.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/grapenordic.com\/en\/online-courses\/cyber-security\/\"><strong>Explore Grape\u2019s IT security course and book a demo<\/strong><\/a><\/p>\n\n\n\n<h2 id=\"h-frequently-asked-questions\" class=\"wp-block-heading\">Frequently asked questions<\/h2>\n\n\n\n<h3 id=\"h-how-often-should-employees-receive-nis2-training\" class=\"wp-block-heading\">How often should employees receive NIS2 training?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">NIS2 does not establish a single training interval for every company. The frequency should reflect the company\u2019s risk assessment, employee roles and changes in the threat landscape. Training during onboarding and following significant changes in responsibilities or system access should form part of the plan.<\/p>\n\n\n\n<h3 id=\"h-is-an-online-course-enough-to-comply-with-nis2\" class=\"wp-block-heading\">Is an online course enough to comply with NIS2?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">No. An online course can support the company\u2019s work with cyber hygiene and cybersecurity training, but the wider NIS2 programme must also include the relevant technical, operational and organisational security measures.<\/p>\n\n\n\n<h3 id=\"h-do-suppliers-also-need-training\" class=\"wp-block-heading\">Do suppliers also need training?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">That depends on the supplier\u2019s role and level of access. If external personnel have access to company data, systems or critical processes, expectations relating to their competence and security behaviour should form part of the supply chain security assessment and, where relevant, the supplier contract.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>An employee in the finance department receives an email from the \u201cCEO\u201d: A supplier must be paid today, the amount is substantial, and the matter is confidential. Whether the money is transferred depends on what happens next. Does the employee act under pressure, or pause and call the CEO to verify the request? This is [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":37507,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[11],"tags":[],"class_list":["post-40941","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-compliance"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.8 (Yoast SEO v28.8) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>NIS2 and employee training: What does your company need to know?<\/title>\n<meta name=\"description\" content=\"What does NIS2 require from employee training? Learn about cyber hygiene, management responsibility, documentation and practical security training.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/grapenordic.com\/en\/nis2-employee-training\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What does your company need to know about NIS2 and employee training?\" \/>\n<meta property=\"og:description\" content=\"What does NIS2 require from employee training? Learn about cyber hygiene, management responsibility, documentation and practical security training.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/grapenordic.com\/en\/nis2-employee-training\/\" \/>\n<meta property=\"og:site_name\" content=\"Grape\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/grapenordic\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-02T10:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-09T10:18:04+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/grapenordic.com\/wp-content\/uploads\/2026\/03\/P1127040-1-scaled.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1707\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Eya Beldi\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Eya Beldi\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/nis2-employee-training\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/nis2-employee-training\\\/\"},\"author\":{\"name\":\"Eya Beldi\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#\\\/schema\\\/person\\\/1ab7afa85a90f45373c38bcb074f5c1b\"},\"headline\":\"What does your company need to know about NIS2 and employee training?\",\"datePublished\":\"2026-10-02T10:00:00+00:00\",\"dateModified\":\"2026-11-09T10:18:04+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/nis2-employee-training\\\/\"},\"wordCount\":1759,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/nis2-employee-training\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/grapenordic.com\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/P1127040-1-scaled.webp\",\"articleSection\":[\"Compliance\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/grapenordic.com\\\/en\\\/nis2-employee-training\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/nis2-employee-training\\\/\",\"url\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/nis2-employee-training\\\/\",\"name\":\"NIS2 and employee training: What does your company need to know?\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/nis2-employee-training\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/nis2-employee-training\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/grapenordic.com\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/P1127040-1-scaled.webp\",\"datePublished\":\"2026-10-02T10:00:00+00:00\",\"dateModified\":\"2026-11-09T10:18:04+00:00\",\"description\":\"What does NIS2 require from employee training? Learn about cyber hygiene, management responsibility, documentation and practical security training.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/nis2-employee-training\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/grapenordic.com\\\/en\\\/nis2-employee-training\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/nis2-employee-training\\\/#primaryimage\",\"url\":\"https:\\\/\\\/grapenordic.com\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/P1127040-1-scaled.webp\",\"contentUrl\":\"https:\\\/\\\/grapenordic.com\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/P1127040-1-scaled.webp\",\"width\":2560,\"height\":1707},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/nis2-employee-training\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Frontpage\",\"item\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What does your company need to know about NIS2 and employee training?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/\",\"name\":\"Grape\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#organization\",\"name\":\"Grape\",\"url\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/grapenordic.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/grape_logo_hvid-2-1.webp\",\"contentUrl\":\"https:\\\/\\\/grapenordic.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/grape_logo_hvid-2-1.webp\",\"width\":433,\"height\":130,\"caption\":\"Grape\"},\"image\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/grapenordic\\\/\",\"https:\\\/\\\/www.facebook.com\\\/grapenordic\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UC2OoQQVitKhGDNqQEH0av0Q\"],\"legalName\":\"Grape A\\\/S\",\"vatID\":\"DK26079926\",\"foundingDate\":\"2001\",\"email\":\"info@grapenordic.com\",\"telephone\":\"+45 70 10 20 48\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"Aldersrogade 1\",\"postalCode\":\"2100\",\"addressLocality\":\"K\u00f8benhavn \u00d8\",\"addressCountry\":\"DK\"},\"location\":[{\"@type\":\"Place\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"Aldersrogade 1\",\"postalCode\":\"2100\",\"addressLocality\":\"K\u00f8benhavn \u00d8\",\"addressCountry\":\"DK\"}},{\"@type\":\"Place\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"Mejlgade 27\",\"postalCode\":\"8000\",\"addressLocality\":\"Aarhus\",\"addressCountry\":\"DK\"}}],\"contactPoint\":{\"@type\":\"ContactPoint\",\"contactType\":\"customer service\",\"telephone\":\"+45 70 10 20 48\",\"email\":\"info@grapenordic.com\",\"url\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/contact\\\/\",\"availableLanguage\":[\"Danish\",\"English\"]},\"areaServed\":[{\"@type\":\"Country\",\"name\":\"Denmark\"},{\"@type\":\"Country\",\"name\":\"Sweden\"},{\"@type\":\"Country\",\"name\":\"Norway\"},{\"@type\":\"Country\",\"name\":\"Finland\"},{\"@type\":\"Country\",\"name\":\"Iceland\"}],\"knowsAbout\":[\"e-learning\",\"compliance training\",\"GDPR\",\"IT security\",\"anti-money laundering (AML)\",\"anti-corruption\",\"onboarding\",\"leadership e-learning\",\"soft skills\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#\\\/schema\\\/person\\\/1ab7afa85a90f45373c38bcb074f5c1b\",\"name\":\"Eya Beldi\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b060ea18e56f68c10bc11a2b5ccf1a989054b58c051a748b81a1bad598325211?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b060ea18e56f68c10bc11a2b5ccf1a989054b58c051a748b81a1bad598325211?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b060ea18e56f68c10bc11a2b5ccf1a989054b58c051a748b81a1bad598325211?s=96&d=mm&r=g\",\"caption\":\"Eya Beldi\"},\"description\":\"Eya Beldi er Marketing Manager hos Grape, hvor hun skriver om digital l\u00e6ring, AI i uddannelse og om, hvordan organisationer i Norden udvikler e-l\u00e6ring, der virker i praksis. Hun er forfatter til bogen \u201cGEO: The New Rules of AI SEO\u201d om synlighed i AI-s\u00f8gning.\",\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/eyabeldi\\\/\"],\"knowsAbout\":[\"e-learning\",\"digital learning\",\"AI in learning\",\"compliance training\",\"leadership e-learning\",\"search visibility\",\"AI search visibility\",\"generative engine optimization\"],\"knowsLanguage\":[\"Danish\",\"English\",\"French\",\"Arabic\",\"Turkish\"],\"jobTitle\":\"Marketing Manager\",\"worksFor\":\"Grape\",\"url\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/author\\\/eya\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"NIS2 and employee training: What does your company need to know?","description":"What does NIS2 require from employee training? Learn about cyber hygiene, management responsibility, documentation and practical security training.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/grapenordic.com\/en\/nis2-employee-training\/","og_locale":"en_US","og_type":"article","og_title":"What does your company need to know about NIS2 and employee training?","og_description":"What does NIS2 require from employee training? Learn about cyber hygiene, management responsibility, documentation and practical security training.","og_url":"https:\/\/grapenordic.com\/en\/nis2-employee-training\/","og_site_name":"Grape","article_publisher":"https:\/\/www.facebook.com\/grapenordic\/","article_published_time":"2026-10-02T10:00:00+00:00","article_modified_time":"2026-11-09T10:18:04+00:00","og_image":[{"width":2560,"height":1707,"url":"https:\/\/grapenordic.com\/wp-content\/uploads\/2026\/03\/P1127040-1-scaled.webp","type":"image\/webp"}],"author":"Eya Beldi","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Eya Beldi"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/grapenordic.com\/en\/nis2-employee-training\/#article","isPartOf":{"@id":"https:\/\/grapenordic.com\/en\/nis2-employee-training\/"},"author":{"name":"Eya Beldi","@id":"https:\/\/grapenordic.com\/en\/#\/schema\/person\/1ab7afa85a90f45373c38bcb074f5c1b"},"headline":"What does your company need to know about NIS2 and employee training?","datePublished":"2026-10-02T10:00:00+00:00","dateModified":"2026-11-09T10:18:04+00:00","mainEntityOfPage":{"@id":"https:\/\/grapenordic.com\/en\/nis2-employee-training\/"},"wordCount":1759,"commentCount":0,"publisher":{"@id":"https:\/\/grapenordic.com\/en\/#organization"},"image":{"@id":"https:\/\/grapenordic.com\/en\/nis2-employee-training\/#primaryimage"},"thumbnailUrl":"https:\/\/grapenordic.com\/wp-content\/uploads\/2026\/03\/P1127040-1-scaled.webp","articleSection":["Compliance"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/grapenordic.com\/en\/nis2-employee-training\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/grapenordic.com\/en\/nis2-employee-training\/","url":"https:\/\/grapenordic.com\/en\/nis2-employee-training\/","name":"NIS2 and employee training: What does your company need to know?","isPartOf":{"@id":"https:\/\/grapenordic.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/grapenordic.com\/en\/nis2-employee-training\/#primaryimage"},"image":{"@id":"https:\/\/grapenordic.com\/en\/nis2-employee-training\/#primaryimage"},"thumbnailUrl":"https:\/\/grapenordic.com\/wp-content\/uploads\/2026\/03\/P1127040-1-scaled.webp","datePublished":"2026-10-02T10:00:00+00:00","dateModified":"2026-11-09T10:18:04+00:00","description":"What does NIS2 require from employee training? Learn about cyber hygiene, management responsibility, documentation and practical security training.","breadcrumb":{"@id":"https:\/\/grapenordic.com\/en\/nis2-employee-training\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/grapenordic.com\/en\/nis2-employee-training\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapenordic.com\/en\/nis2-employee-training\/#primaryimage","url":"https:\/\/grapenordic.com\/wp-content\/uploads\/2026\/03\/P1127040-1-scaled.webp","contentUrl":"https:\/\/grapenordic.com\/wp-content\/uploads\/2026\/03\/P1127040-1-scaled.webp","width":2560,"height":1707},{"@type":"BreadcrumbList","@id":"https:\/\/grapenordic.com\/en\/nis2-employee-training\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Frontpage","item":"https:\/\/grapenordic.com\/en\/"},{"@type":"ListItem","position":2,"name":"What does your company need to know about NIS2 and employee training?"}]},{"@type":"WebSite","@id":"https:\/\/grapenordic.com\/en\/#website","url":"https:\/\/grapenordic.com\/en\/","name":"Grape","description":"","publisher":{"@id":"https:\/\/grapenordic.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/grapenordic.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/grapenordic.com\/en\/#organization","name":"Grape","url":"https:\/\/grapenordic.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapenordic.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/grapenordic.com\/wp-content\/uploads\/2026\/09\/grape_logo_hvid-2-1.webp","contentUrl":"https:\/\/grapenordic.com\/wp-content\/uploads\/2026\/09\/grape_logo_hvid-2-1.webp","width":433,"height":130,"caption":"Grape"},"image":{"@id":"https:\/\/grapenordic.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/grapenordic\/","https:\/\/www.facebook.com\/grapenordic\/","https:\/\/www.youtube.com\/channel\/UC2OoQQVitKhGDNqQEH0av0Q"],"legalName":"Grape A\/S","vatID":"DK26079926","foundingDate":"2001","email":"info@grapenordic.com","telephone":"+45 70 10 20 48","address":{"@type":"PostalAddress","streetAddress":"Aldersrogade 1","postalCode":"2100","addressLocality":"K\u00f8benhavn \u00d8","addressCountry":"DK"},"location":[{"@type":"Place","address":{"@type":"PostalAddress","streetAddress":"Aldersrogade 1","postalCode":"2100","addressLocality":"K\u00f8benhavn \u00d8","addressCountry":"DK"}},{"@type":"Place","address":{"@type":"PostalAddress","streetAddress":"Mejlgade 27","postalCode":"8000","addressLocality":"Aarhus","addressCountry":"DK"}}],"contactPoint":{"@type":"ContactPoint","contactType":"customer service","telephone":"+45 70 10 20 48","email":"info@grapenordic.com","url":"https:\/\/grapenordic.com\/en\/contact\/","availableLanguage":["Danish","English"]},"areaServed":[{"@type":"Country","name":"Denmark"},{"@type":"Country","name":"Sweden"},{"@type":"Country","name":"Norway"},{"@type":"Country","name":"Finland"},{"@type":"Country","name":"Iceland"}],"knowsAbout":["e-learning","compliance training","GDPR","IT security","anti-money laundering (AML)","anti-corruption","onboarding","leadership e-learning","soft skills"]},{"@type":"Person","@id":"https:\/\/grapenordic.com\/en\/#\/schema\/person\/1ab7afa85a90f45373c38bcb074f5c1b","name":"Eya Beldi","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/b060ea18e56f68c10bc11a2b5ccf1a989054b58c051a748b81a1bad598325211?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/b060ea18e56f68c10bc11a2b5ccf1a989054b58c051a748b81a1bad598325211?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b060ea18e56f68c10bc11a2b5ccf1a989054b58c051a748b81a1bad598325211?s=96&d=mm&r=g","caption":"Eya Beldi"},"description":"Eya Beldi er Marketing Manager hos Grape, hvor hun skriver om digital l\u00e6ring, AI i uddannelse og om, hvordan organisationer i Norden udvikler e-l\u00e6ring, der virker i praksis. Hun er forfatter til bogen \u201cGEO: The New Rules of AI SEO\u201d om synlighed i AI-s\u00f8gning.","sameAs":["https:\/\/www.linkedin.com\/in\/eyabeldi\/"],"knowsAbout":["e-learning","digital learning","AI in learning","compliance training","leadership e-learning","search visibility","AI search visibility","generative engine optimization"],"knowsLanguage":["Danish","English","French","Arabic","Turkish"],"jobTitle":"Marketing Manager","worksFor":"Grape","url":"https:\/\/grapenordic.com\/en\/author\/eya\/"}]}},"_links":{"self":[{"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/posts\/40941","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/comments?post=40941"}],"version-history":[{"count":1,"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/posts\/40941\/revisions"}],"predecessor-version":[{"id":40942,"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/posts\/40941\/revisions\/40942"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/media\/37507"}],"wp:attachment":[{"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/media?parent=40941"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/categories?post=40941"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/tags?post=40941"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}