📋 Tender Overview
The Government of the Republic of Slovenia, pursuant to the sixth paragraph of Article 20 of the Information Security Act (ZINFV-1), issued a regulation on the training of responsible persons in the field of information and cyber security risk management.The Decree provides for the program and manner of compulsory training of responsible persons of essential and important entities committed by law with the aim of ensuring a high level of security of networks and information systems and protection against cyber threats. The regulation is an important step towards the systematic increase in cyber security levels of the Republic of Slovenia, as it introduces compulsory training of responsible persons who decide on the management of risks in the networks and information systems of public and private sector organizations. The training program is prepared in accordance with the provisions of the ZINFV-1 and the European Directive (EU) 2022/2555 (NIS 2), which provides for the obligation to establish systems for regular training of management persons in the field of cyber security.
The training will be held under the auspices of the Government Office of the Republic of Slovenia for Information Security (URSIV), and experts from the computer security incidents (CSIRT) will be able to participate in the implementation of individual content.
The program comprises six content sets:
Introduction to Information and Cyber Security, Legal Regulation and International Standards in the Field of Information and Cyber Security,
Managing assets and risk management,
Business and Continuous Business Influence Assessment,
Responding to information security incidents,
Safety Chain Security,
Execution of obliged supervision and frequent findings of discrepancies with regulations under inspections.
The training will be free of charge for participants, at least eight teaching hours and will be conducted in the form of lectures or workshops. After successfully completing the program, participants will receive an electronic competence certificate, which will be valid for four years.
Ursiv will keep records of certificates issued and take care of the call for training terms.
The regulation shall enter into force on the fifteenth day after its publication in the Official Gazette of the Republic of Slovenia.
