How is this different from open certifications like TRECCERT, PECB, or CISM?

Those are off-the-shelf, self-paced or open-cohort programmes that issue a credential based on a standardised exam. They're useful for individual professional development. Our programme is private, customised to your entity, and delivered by practitioners who run the audits.

Which frameworks can you train?

We train for DORA, ISO 27001, CCSS, VARA, MiCA (operational side), NIS2, SOC 2, GDPR, PCI DSS, and sector-specific frameworks on request.

Do you sign NDAs before reviewing our environment?

Yes. NDA is signed before any material exchange. Customisation does not require access to production - we work from your existing artifacts (policies, risk register, asset register, contracts).

Will participants receive a certificate?

Yes - a Hacken-branded certificate of completion is issued to participants who pass the mock exam. The certificate itself is not recognised by regulator as qualification.

Can the training count as CPD for our team?

Hours can be self-declared for CPD with most professional bodies (ISACA, (ISC)², IIA). We provide a signed letter of attendance with hours and topics covered.

We've already done some training internally / with another provider. Can you build on top?

Yes. We start with a scoping meeting precisely to avoid duplication and target the gaps you have now.

Executive Cybersecurity Training

Cybersecurity training for C-suite, senior leadership, and management bodies preparing for certification and licensing. Custom one-to-three-day programmes tailored to your licence, business model, and artifacts. Built by Hackeners engaging with DORA/MiCA, ISO 27001, CCSS, VARA daily.

Security partner for Web3 builders, enterprises, and governments since 2017

1500+: risk assessments delivered
20+: framework implementations led (DORA, ISO, CCSS, MiCA, VARA)
10+: years average practitioner experience
ISO 27001:2022: certified

Executive security training, built by the practitioners who run the audits

One- to three-day programs for boards and C-suite, delivered by the Hackeners who run live DORA, ISO 27001, CCSS, VARA, and MiCA engagements. Your licence, your business model, your existing artifacts — the training is built around them.

Your leadership works through the real failure modes we see in live audits, on your own risk registers, incident reports, and testing programs. They keep a direct line to the instructor between sessions, and leave with artifacts they can take straight into the next audit committee.

That is what we build.

Why Hacken executive security training

Most providers

Open cohorts and generic decks
Trainer reads the regulation
Standard case studies
Slides and certificate only
One-and-done

Hacken executive security training

Private program tailored to your entity
Instructor turns the regulation into decisions for your specific licence and case
Real failure modes from security and compliance engagements
Slides + walkthroughs of real risk registers, incident reports, and testing programmes from live audits
Inter-session access to the instructor + post-training advisory

Built for the people regulators hold personally accountable

Board and management body

Own and approve the framework. Supervisors direct questions on it to the board.

C-Suite (CEO, COO, CFO, CTO, CISO)

Each role is accountable for the framework within its own domain.

Heads of Risk, Compliance, and Internal Audit

Responsible for challenging the framework and identifying gaps ahead of the regulator.

Senior Engineering & Security Leadership

Translate the framework into operational controls.

ICT Third-Party Providers

In scope under DORA, ISO 27001, and SOC 2 when serving regulated entities.

Frameworks we train

Choose the framework. We build the program around your entity, your artifacts, and your leadership responsibilities.

For financial entities, CASPs, and ICT third-party providers preparing for DORA governance, ICT risk management, incident reporting, resilience testing, TLPT, third-party risk, and information-sharing expectations.

The program is built for the people who must understand, approve, oversee, and challenge the ICT risk management framework – not just document it.

What your team gets

Every program leaves your team with working artifacts — hand-built by the experts who ran it, and yours to keep long after the engagement ends

Customised training materials

Slide decks our experts build around your licence type, your assets, your third parties, and the real gaps they find in your setup.

Recommendations memo

A short, named-owner memo summarising the gaps surfaced during the training and the priority closures.

Inter-session instructor access

Between training days, your team has a direct line to the instructor for follow-up questions via slack/teams channel or email.

Mock examination and certification

We close the programme with a mock exam aligned to the relevant framework, calibrated against supervisory questioning style. Participants who pass receive a Hacken-branded certificate of completion.

Live training sessions

One- to three-day programmes delivered on-site or remotely. Mix of regulator-style briefings, working sessions on your real artifacts, and Q&A with an instructor.

How the training engagement works

A defined five-step path from first scoping call to mock exam — so you know exactly how the engagement runs before you commit.

We start with a kickoff meeting with the sponsor, usually the CISO, Head of Compliance, Head of Risk, or executive owner. We define the audience, framework, timeline, current maturity, existing artifacts, known gaps, and expected outcome. Output: scoped training plan.

Why Hacken

ISO 27001:2022

certified ourselves

1500+

risk assessments delivered

20+

framework implementations led

Dmytro Yasmanovych

Head of GRC & Security Operations at Hacken, with 10 years in information security, penetration-testing background, CISM, CCSSA, ISO 27001 Lead Implementer, and Practical Ethical Hacking certification

Audited CCSS Level 3 for