Do you need a broad introduction or a specific specialisation?
A shared foundation helps when starting out. With a defined work assignment, the right subject often matters more than the highest course title.
Information & cybersecurity · PECB Authorized Partner
Which security responsibility would you like to handle more confidently?
Start with your responsibilities rather than a long list of standards. Explore learning paths that fit your goal, from shared fundamentals to specialist topics.
1Choose your subject
2Compare learning paths
3Course details and booking
Three questions to guide your choice
Will you contribute, implement or assess existing practices?
This helps identify the focus: understanding, implementation, management or audit.
Which environment matters most?
Applications, networks, cloud services, connected devices and industrial systems involve different responsibilities.
Start with your goal. Then choose your course.
Which learning path fits your role?
Connect security fundamentals and controls
- Who is it for?
- You are entering security or coordinating security responsibilities.
- What you can work towards
- Understand core terms and how technical and organisational controls work together.
- Subject focus
- Cybersecurity provides the broad perspective; ISO/IEC 27002 focuses on security controls.
Relevant courses and next steps
Assess information security risks
- Who is it for?
- You contribute to risk assessments or take responsibility for risk management.
- What you can work towards
- Focus on traceable risk assessments and decisions about risk treatment.
- Subject focus
- ISO/IEC 27005 supports a systematic approach to information security risk.
Relevant courses and next steps
Prepare for security incidents
- Who is it for?
- You work in security, IT operations or an incident response team.
- What you can work towards
- Structure responsibilities, coordination and the handling of security incidents.
- Subject focus
- ISO/IEC 27035: preparation and coordinated incident management.
Relevant courses and next steps
Investigate digital evidence
- Who is it for?
- You need to investigate digital incidents and document findings clearly.
- What you can work towards
- Develop the forensic perspective on digital traces and systematic investigations.
- Subject focus
- Certified Digital Forensics Examiner (CDFE): digital forensics and traceable investigation.
Relevant courses and next steps
Organise cloud security and assurance evidence
- Who is it for?
- You support cloud services or prepare evidence for customers and assessments.
- What you can work towards
- Distinguish cloud security responsibilities from preparation for a SOC 2 examination.
- Subject focus
- Lead Cloud Security Manager and Lead SOC 2 Manager offer different perspectives.
Relevant courses and next steps
Support secure applications throughout their life cycle
- Who is it for?
- You work in development, AppSec, product ownership or auditing.
- What you can work towards
- Connect security requirements, consistent processes and verification.
- Subject focus
- ISO/IEC 27034: understand, implement or audit application security.
Relevant courses and next steps
Develop network security
- Who is it for?
- You plan, operate or coordinate network security.
- What you can work towards
- Approach network security as a connected planning and management responsibility.
- Subject focus
- ISO/IEC 27033 Lead Network Security Manager.
Relevant courses and next steps
Protect connected devices and industrial systems
- Who is it for?
- You work with IoT solutions, automation or industrial control systems.
- What you can work towards
- Distinguish IoT security and privacy from the requirements of industrial OT environments.
- Subject focus
- ISO/IEC 27400 for IoT; ISA/IEC 62443 for industrial automation and control systems.
Relevant courses and next steps
See the individual course page for prices, dates, prerequisites and completion requirements.
Questions about choosing your course
I do not know the standard numbers. Where should I begin?
Start with a task from your daily work. Is it about risk, security controls, incidents or a particular technical environment? The paths above help you orient yourself; a consultation can refine the choice.
Must I complete every Foundation course first?
No. The courses do not form a universal mandatory sequence. Your knowledge, responsibilities and the prerequisites of the individual course matter. Check its product page for details.
Is the highest level always the best choice?
A higher course title does not automatically provide the greatest benefit for your current role. A focused introduction may fit a new responsibility better than an extensive management or audit course.
How do incident management and digital forensics differ?
Incident management focuses on coordinated handling of an incident. Digital forensics investigates digital traces. Depending on your responsibilities, one focus or a combination may be appropriate.
Can we combine topics for our team?
Yes. We can help you select different learning paths for different roles. Tell us the team size, responsibilities and goals. Each course retains its own content and credential requirements.
Where are the prices, duration and booking options?
Once you have identified the subject, open the relevant course page. It contains the offer details and available formats. We are happy to help with your selection.
Not sure which path fits?
Tell us about your responsibilities, experience and learning goal. We will help you choose a suitable learning path.
Solo self-employed in Germany: discuss potential KOMPASS support with an official advisory centre before booking. You are welcome to arrange a consultation with us.