Hands-on training on ISO 27001, NIS 2, GDPR, ISO 31000 and the EU AI Act, for management, IT, compliance, data protection, AI officers and business units.
Five courses, each live online or in-house, plus custom formats. Tap a card for details and prices.
AI contentPlan, run and properly document ISMS audits per ISO 19011
For: ISMS officers, auditors, GRC, QM
Lead Auditor (5 days) additionally: leading audit teams. Lead: €1,690 / €7,950 / +€250
AI contentFrom applicability assessment to an actionable roadmap
For: Executive management, CISO, IT, compliance
AI contentIdentify, assess and steer risks in a structured way
For: Managers, risk management, GRC
AI contentData protection from the fundamentals to processes, contracts and evidence
For: Data protection, HR, IT, business units
AI contentBuild and document AI literacy under Art. 4 AI Act
For: Management, compliance, IT, AI users
AI contentIn-house workshop on demand, content tailored to your organization
For: Organizations with specific training or consulting needs
Executive briefing: half a day, flat rate per topic for up to 12 people
All courses: German or English · In-house as a flat rate per group of up to 12 people, plus travel costs · Prices net · GAD certificate of attendance (not an accredited personnel certification)
All prices net, plus VAT. Our offer is aimed exclusively at businesses, public authorities and self-employed professionals, not at consumers.
Five quick questions on ISO 27001, NIS 2, GDPR, the EU AI Act and risk management. Not a test, just a fast self-check.
What does an ISMS under ISO/IEC 27001 describe?
An ISMS (Information Security Management System) is an organizational framework of policies, processes and controls, not a single piece of software.
Who does the NIS 2 directive apply to?
NIS 2 widens the scope considerably, including energy, health, transport and digital services, and also covers many mid-sized companies.
Within what time must a notifiable data breach generally be reported to the supervisory authority?
Under Art. 33 GDPR, generally within 72 hours of becoming aware of the breach.
How does the EU AI Act classify AI systems?
The EU AI Act is risk-based. The risk class determines the obligations; high-risk systems face the strictest requirements.
What comes first in risk management under ISO 31000?
Without a defined context and systematic identification, risks can be neither meaningfully assessed nor managed.
You answered 0 of 5 questions correctly.
Whether a refresher or real depth: our courses cover exactly these topics hands-on, with concrete roles, measures and evidence.
GAD Academy translates regulatory requirements into concrete measures, roles, processes and evidence, with hands-on examples from cybersecurity, data protection, governance and AI regulation.
On completion, participants receive a GAD certificate of attendance.
It does not replace any official ISO, TÜV, EU or government certification, but is suitable as an internal training and awareness record.
No. You receive a GAD certificate of attendance, on request with a note on the passed knowledge test. This is a training record from GermanAI Defense, not an official ISO, TÜV, EU or government certification.
All courses can be delivered as live online training or in-house workshop. For senior management there is also an executive briefing: half a day, €1,950 net per topic for up to 12 people.
Yes. Especially for in-house courses, content, examples, roles, risks and specific questions can be adapted to your organization.
On request, a short knowledge test can be integrated. A pass is noted on the GAD certificate of attendance.
The courses are aimed at executive management, IT, compliance, data protection, GRC, AI officers, business units and employees who need to understand and implement regulatory requirements with confidence.
