TRAINING / WORKSHOPS / GDPR / CYBERSECURITY
Training and workshops based on real-world experience
I deliver closed training sessions for employees, management, and teams responsible for data protection and cybersecurity. I tailor the program to participants’ roles, organizational processes, and real situations they may encounter.
Training is delivered primarily online. In-person sessions are also available upon request.
Training designed for your organization
1
Closed participant group
Training delivered exclusively for one organization.
2
Scope tailored to roles and processes
Topics and examples correspond to participants and the organization’s operations.
3
Online or in-person
Delivery format determined according to the training’s purpose and nature.
4
Materials and attendance confirmation
Scope of materials, certificates, or certificates of attendance determined individually.
Most frequently delivered training
I always tailor the scope to the organization and participants. I most frequently deliver four types of training and workshops.
1
GDPR for employees
For individuals who work with personal data in their daily tasks. The training helps understand basic principles, respond appropriately to typical situations, and recognize situations requiring internal reporting or consultation. I tailor examples and scope to the organization’s processes and the types of data used by participants.
2
GDPR for boards and management
For individuals responsible for oversight, decisions, and process organization. The training focuses on accountability, risk, and the information that leadership should expect from the DPO, IT, compliance, and process owners.
3
NIS2 for boards and leadership
For individuals managing the organization and overseeing cybersecurity. The training covers the board’s role, risk management, oversight of organizational activities, and information needed for decision-making. I tailor the scope to the client’s legal and organizational situation.
4
Dedicated training and workshops
For specific teams, processes, projects, or problems. The program may combine data protection, information security, incidents, vendor collaboration, and the accountability of individuals involved in organizational processes.
Most common training needs
Training may result from organizational obligations, changes in operations, or the need to reduce recurring errors.
1
New employees
New hires should understand data protection principles, information security, and the accountability associated with their work.
2
Obligations related to GDPR or NIS2
The organization wants to support fulfillment of obligations related to data protection or cybersecurity and document actions that develop participants’ knowledge of processes.
3
Organizational or technological changes
New systems, processes, services, or requirements change the way work is done and the associated risks.
4
Recurring errors or incidents
Training helps translate lessons from real problems into safer behaviors and more effective responses.
Training designed for your organization
I prepare each program for a specific organization. I tailor the training scope to participants, their responsibilities, processes, and real situations they may encounter. I draw on experience from DPO work, data protection, IT, cybersecurity, and incident response.
1
Tailored to roles and processes
Operational staff, management, boards, IT, DPO, or compliance receive different scopes.
2
Examples from real situations
Participants work with situations similar to their daily tasks, not just definitions and regulations.
3
Combining law, organization, and technology
Content shows the relationships between obligations, systems, processes, and accountability for decisions.
How does the collaboration work?
Collaboration is simple and structured. First, we determine the expected training outcome, then the scope, format, and materials.
1
Identifying needs
We determine the participant group, their roles, knowledge level, and training objective.
2
Tailoring the program
We select topics, examples, and a format appropriate for the organization.
3
Preparing materials
I develop the presentation, exercises, scenarios, or knowledge test according to the agreed scope.
4
Delivering the training
Training takes place online or in-person, with the opportunity to ask questions and discuss practical situations.
5
Summary
The organization receives the agreed materials, documents confirming participation, and, if included in the scope, recommendations for further actions.
The scope may include training materials, exercises, scenario analysis, knowledge tests, certificates, or certificates of attendance. We determine details individually.
OUTCOMES
What value should the training deliver?
The goal is not simply to convey information. Training should support participants’ operations and reduce risk arising from daily decisions.
1
Better understanding of obligations
Participants know what they are responsible for and when they need support from the DPO, IT, a supervisor, or another appropriate person.
2
Reducing the risk of recurring errors
Principles are related to daily tasks where mistakes and improper habits most frequently occur.
3
Faster recognition of risky situations
Participants can identify situations requiring a response and know where to report them.
4
Better collaboration
Employees, management, IT, DPO, and compliance more easily use common terminology and understand their roles.
EXPERIENCE
Knowledge from practice
I deliver training based on experience gained working with organizations, not solely on presenting regulations.
1
Over 20 years of technology experience
Practical experience working with systems, processes, vendors, and real organizational problems.
2
DPO + IT + Cybersecurity
Combining legal, organizational, and technical perspectives.
3
Working with boards and complex organizations
I tailor content and delivery to decision-makers and teams executing activities.
4
Real situations and incidents
Examples come from audits, implementations, breach response, and team collaboration. They are generalized and stripped of confidential information.
Frequently asked questions
Is training delivered online or in-person?
I deliver training primarily online. In-person sessions are also available upon request, particularly for workshops, management meetings, or organizational events.
Is the program tailored to the organization?
Yes. I determine the participant group, their roles, knowledge level, organizational processes, and expected outcome. Based on this, I select the scope, examples, and training format.
How long does the training last?
Duration depends on the participant group, scope, and format. It may be a brief informational session, an extended board session, or a workshop on a specific process. I determine the recommended duration after identifying needs.
Do participants receive materials?
Yes, if included in the agreed scope. These may be summary materials, presentations, exercises, scenarios, or other content supporting knowledge application after training.
Are certificates of attendance or certificates issued?
Yes. The form of attendance confirmation is determined with the organization and depends on the type of training. A certificate or certificate of attendance is part of documenting participation, not the primary training outcome.
Can training help fulfill obligations related to GDPR or NIS2?
Yes. Training can be part of the organization’s actions related to developing knowledge, awareness, and accountability. However, training alone does not replace other organizational, technical, documentation, or supervisory measures required in a specific situation.
DISCUSSION ABOUT TRAINING NEEDS
Let’s determine the appropriate scope for your organization
Initially, information about the organization, participant group, and expected objective is sufficient. During the first conversation, we will determine the recommended scope, format, and training delivery method.
Request contact
The data controller for information provided in the form is Michał Rutkowski, operating LabLogic Consulting. I use the data to handle the inquiry and prepare a response or offer. Details are available in the Privacy Policy. Do not submit passwords or special categories of data.