The “PECB Certified NIS 2 Directive Lead Implementer” exam meets all the requirements of the PECB Examination and Certification Program (ECP). It covers the following competency domains:
- Domain 1: Fundamental concepts and definitions of NIS 2 Directive
- Domain 2: Planning of NIS 2 Directive requirements implementation
- Domain 3: Cybersecurity roles and responsibilities and risk management
- Domain 4: Cybersecurity controls, incident management, and crisis management
- Domain 5: Communication and awareness
- Domain 6: Testing and monitoring of a cybersecurity program
For specific information about the exam type, languages available, and other details, please visit the List of PECB Exams and Exam Rules and Policies.
After successfully completing the exam, you can apply for one of the credentials shown in the table below. You will receive a certificate once you fulfill all the requirements of the selected credential.
Credential |
Exam |
Professional experience |
NIS2MS project experience |
Other requirements |
PECB Certified NIS 2 Directive Provisional Implementer |
PECB Certified NIS 2 Directive Lead Implementer exam or equivalent |
None |
None |
Signing the PECB Code of Ethics |
PECB Certified NIS 2 Directive Implementer |
PECB Certified NIS 2 Directive Lead Implementer exam or equivalent |
Two years: One year in cybersecurity management |
Project activities: at least 200 hours |
Signing the PECB Code of Ethics |
PECB Certified NIS 2 Directive Lead Implementer |
PECB Certified NIS 2 Directive Lead Implementer exam or equivalent |
Five years: Two years in cybersecurity management |
Project activities: at least 300 hours |
Signing the PECB Code of Ethics |
PECB Certified NIS 2 Directive Senior Lead Implementer |
PECB Certified NIS 2 Directive Lead Implementer exam or equivalent |
Ten years: Seven years in cybersecurity management |
Project activities: at least 1000 hours |
Signing the PECB Code of Ethics |
The cybersecurity management experience activities should follow best cybersecurity management practices and include the following:
- Conducting comprehensive risk assessments specific to critical infrastructure systems
- Managing incident response plans tailored to the requirements of the NIS 2 Directive
- Implementing appropriate security measures and controls
- Implementing metrics and performance indicators
- Managing and responding to cybersecurity incidents
- Conducting management reviews
- Managing a cybersecurity team
For more information about NIS 2 Directive certifications and the PECB Certification process, please refer to Certification Rules and Policies.
Exam Information:
- Exam Type: Multiple choice
- Duration of the exam: 3 hours
- Exam language: English
- “Open book”
- Number of questions: 80
- Exam Availability: Online/On paper