- Next session
- 23/03/2027, 08h30 – 12h00
- Duration
- 3h30
- Training language
- French or English
- Venue
- Chambre de Commerce, 7 rue Alcide de Gasperi, L-1615 Luxembourg-Kirchberg
- Reference
- 014256
- Price
- 175,00 € excl. VAT, VAT at 3%
Cybersecurity and digital resilience for SME COOs and IT managers
This module helps operational and IT managers organise detection, response and service continuity.
An SME cannot prevent everything, and nobody asks it to. What is expected of its COO or IT manager is to recognise that something is happening, to respond in the right order, and to keep the business running meanwhile. This half-day provides that framework: reading an attack, choosing and ordering tooling without being sold the useless, preparing for the most likely incidents, and knowing whom to notify, and when.
Who this course is for
- COOs, CISOs, IT managers, compliance officers and DPOs of SMEs
- Heads of operational security or business continuity in a larger organisation
- Technical leads of fiduciaries, SaaS vendors and consulting firms
- Consultants who support SMEs on resilience and incident management
The situations it deals with
- A provider offers you a "managed SOC" and you must decide whether that is what the company needs, and at what price
- A workstation encrypts its files on a Thursday evening; within ten minutes you must decide what to isolate, what to switch off, whom to call
- The CEO asks "are we protected?", and you want to be able to answer something other than yes
- A probable data breach: you need to know whether the CNPD must be notified, within what time, and by whom
- A critical supplier is hit itself, and your own access to their systems becomes the question
What you will be able to do afterwards
- Place what "detect and respond" adds to "prevent and protect", and explain it to a director
- Read the anatomy of an attack over time and recognise which phase you are in
- Tell EDR, NDR, SIEM, XDR, SOC and MDR apart, and put a precise request to a provider
- Prepare the response to the most likely incidents — ransomware, CEO fraud, business email compromise, data breach
- Write a credible business continuity plan and disaster recovery plan, with recovery time and data loss objectives the company can meet
- Set up a crisis cell and notify the CNPD and CIRCL within the deadlines
How the session runs
- From "Prevent & Protect" to "Detect & Respond"
- Anatomy of an attack over time — kill chain, documented real cases
- First interactive practical case, on your phone, then a debrief
- Detection and response tooling, and how to order it
- Handling the main types of incident and notifying the authorities
- Business continuity plan, disaster recovery plan, crisis cell
- Second interactive practical case, then a debrief
- Supply chain and trusted third parties; working with the director, the insurer and the authorities
Prerequisites
Familiarity with a professional IT environment — knowing what an admin account, a backup and a firewall are. No engineering prerequisite: nothing is configured during the session.
Registration with the House of Training
Registration and payment go through the House of Training, which manages dates and seats. LuxHawk takes no registrations.
This page is LuxHawk's own text; the House of Training catalogue entry is authoritative for dates, price and the official programme.
Interactive teaching
In the room, participants join the session space by scanning a projected QR code — or, if the group prefers, the session is run by a show of hands. Guided questions, concrete situations and collective feedback help adapt explanations as the session goes on; the group's understanding is measured when answers go through the phones.