aircpd

Solutions · Technology and cyber

The obligation reaches the board, and so does the liability.

Cyber and data regimes increasingly require the people at the top to be trained, not just the workforce, and they judge you on evidence rather than attendance. aircpd captures both, in the formats people actually learn in.

The aircpd console · Technology and cyber

The shape of the problem

Cyber and data obligations are outcome based almost everywhere. They ask for awareness, competence and appropriate measures, and they leave you to demonstrate that you delivered them. Certification standards go further and ask for documented evidence of competence.

What makes this market distinctive is that the duty reaches the management body. Directors are expected to undertake training themselves, and can be held personally accountable. Board training is exactly the training least likely to run through a learning platform: it happens in briefings, at conferences, in advisory sessions and in reading.

How the rules vary

MarketWhat is requiredShape
European Union, network and information securityMembers of management bodies are required to follow training, and entities are encouraged to offer similar training to employees regularly. Basic cyber hygiene and security training sit among the minimum measuresMandatory for the board, expected for staff
European Union, financial sector resilienceSecurity awareness and operational resilience training across staff and senior managementOutcome based
Data protectionAccountability requires you to demonstrate compliance, and awareness-raising and staff training sit among the data protection officer's tasksOutcome based
Certification standardsCompetence and awareness, with documented evidence retained, where an organisation is certifiedDocumented evidence required
European Union, artificial intelligenceProviders and deployers must take measures to support the development of AI literacy. No specific level is required of any individualEffort based

Where aircpd helps

Board training, evidenced as carefully as staff training.

Briefings, conference sessions, advisory meetings and reading captured for the people whose training obligation is personal.

Awareness in the formats people use.

A conference session, a podcast, a vendor webinar and a written briefing are all real learning. aircpd records them with evidence attached instead of losing them.

Audit evidence, always current.

Certification and assessment evidence held continuously rather than gathered in the fortnight before an assessor arrives.

Effort you can show.

Where the duty is to take measures rather than reach a level, a record of what you actually did is the whole defence.

“Under the EU network and information security regime, members of management bodies are required to follow training, and management bodies can be held liable for infringements.”

Who this is for

Chief information security officersData protection officersCompliance and riskCertification and audit leads

Board and staff training evidenced in the formats people actually learn in, and audit evidence that is always current.

Regulators and professional bodies are named to illustrate the markets aircpd is designed for. No partnership or endorsement is implied. Requirements change: this page is a guide, not legal advice.

Start with the record you already have.

Connect your calendar and files, and aircpd will show you the CPD you've already completed this year. Most people are further along than they think.