- Next session
- 09/11/2026, 08h30 – 12h00
- Duration
- 3h30
- Training language
- French or English
- Venue
- Chambre de Commerce, 7 rue Alcide de Gasperi, L-1615 Luxembourg-Kirchberg
- Reference
- 014251
- Price
- 175,00 € excl. VAT, VAT at 3%
Cybersecurity and digital resilience for SME executives
This module gives leaders a clear view of priorities: responsibilities, delegation, expectations towards providers and continuity of activity.
A cyber incident in an SME is decided in a few hours and paid for over months: business interruption, the insurer's questions, the director's liability. This half-day does not make you a technician. It gives you what you need to decide — what is yours, what you can entrust, what you are entitled to demand from your IT and your providers — and where to start.
Who this course is for
- Directors, partners, managing directors and board members of very small, small and mid-sized companies
- Members of a management committee in charge of risk, compliance or cyber
- Fiduciaries, chartered accountants and advisers who support SMEs
The situations it deals with
- Your IT provider sends you a "security" quote and you do not know what to ask in return
- The insurer sends you a six-page cyber questionnaire before renewing the policy
- One Monday morning nothing opens any more, and the first decision is yours
- A major customer asks, in its call for tenders, what you do about cybersecurity
- An employee leaves and nobody knows exactly what they still had access to
What you will be able to do afterwards
- Place your responsibilities — GDPR, NIS2, duty of care — and know which ones cannot be delegated
- Name the three or four assets without which the company stops, and the dependencies that carry them
- Choose the high-impact, low-cost measures, and tell them apart from those you are being sold
- Read an SME-sized cyber dashboard, and ask your IT the right questions
- Weigh budget, insurance and supplier requirements against each other, with criteria you can explain
- Take the decisions of the first twenty-four hours of an incident, in order
How the session runs
- The director facing cyber risk: responsibilities and regulatory framework (GDPR, NIS2)
- Mapping vital assets, critical dependencies and feared scenarios
- First interactive practical case, on your phone, then a debrief
- High-impact, low-cost measures
- The director's cyber dashboard
- Cyber budget and trade-offs; cyber insurance and the supply chain
- Second interactive practical case, then a debrief
- The first twenty-four hours of an incident, from the director's seat
Prerequisites
No technical prerequisite. The course is for non-technical directors, and the vocabulary is explained as it comes.
Registration with the House of Training
Registration and payment go through the House of Training, which manages dates and seats. LuxHawk takes no registrations.
This page is LuxHawk's own text; the House of Training catalogue entry is authoritative for dates, price and the official programme.
Interactive teaching
In the room, participants join the session space by scanning a projected QR code — or, if the group prefers, the session is run by a show of hands. Guided questions, concrete situations and collective feedback help adapt explanations as the session goes on; the group's understanding is measured when answers go through the phones.