NIS 2 LI study guide
NIS 2 LI · Work through your exam, one topic at a time.
The NIS 2 Lead Implementer credential is a professional certification offered by PECB, a certification body whose stated focus is "Building Digital Trust" through training courses and certification. PECB's own navigation places the NIS 2 Directive training within its Cybersecurity Management category, alongside topics such as Cloud Security, Penetration Testing, SCADA and ISO/IEC 27033, and lists a NIS 2 Directive Lead Implementer entry under the same programme family. The NIS 2 LI study guide has 5 sections and about 1,720 words.
01Fundamental concepts and principles of the NIS 2 Directive
This domain tests the legal architecture of Directive (EU) 2022/2555: why it exists, who is caught, how entities are tiered, and which EU and national bodies do what. Expect definitional precision rather than tool-level detail.
347 words, about 2 min02Scoping and planning a NIS 2 compliance programme
This domain tests whether you can turn the directive into a bounded programme: classify the entity, define the legal perimeter, register, assign accountability, baseline against Articles 20, 21 and 23, and sequence work with realistic dependencies. Start with the sector test under Annexes I and II, then apply the SME thresholds: medium-sized is broadly 50 or more employees or above EUR 10 million turnover or balance sheet; large is broadly 250 or more employees or above EUR 50 million turnover and EUR 43 million balance sheet.
361 words, about 2 min03Implementing cybersecurity risk-management measures and controls
This domain tests the Article 21 risk-management measures and Article 20 governance duties. The exam favours mapping a real control to a legal measure and showing evidence, risk rationale and management sign-off.
330 words, about 2 min04Incident handling, reporting obligations and supply chain security
This domain tests operational incident response and the Article 23 reporting clock, plus supply-chain duties. You must distinguish detection, early warning, notification and final report, and separate NIS2 timing from GDPR timing.
358 words, about 2 min05Monitoring, continual improvement and preparation for certification
This domain tests how compliance is supervised, evidenced and improved. It covers supervisory powers, penalties, monitoring metrics, management review, testing and readiness for European cybersecurity certification.
324 words, about 2 min