The KMU.kompetent.sicher project supports small and medium-sized enterprises (SMEs) in implementing the increased requirements of the NIS 2 directive in the area of IT security. SMEs face challenges such as a lack of IT expertise, weak strategies and low risk awareness, which makes it difficult to manage security risks. Building on the predecessor projects ITS.Competent and KMU.Einfach Sicher., the project aims to develop an integrated NIS-2 competence platform. This will help to raise awareness of IT security, implement targeted measures and promote a sustainable IT security culture. The aim is to qualify managers and employees in line with requirements through practice-oriented approaches and a stronger focus on corporate culture. This is to be achieved through suitable, digital, modular learning units based on competency tests on the topic of IT security, which are aligned with the NIS-2 directive and prepared didactically and in terms of media education. The content can be used independently on all devices with an internet connection. Registration and use of the competence platform is free of charge. The "KMU.kompetent.sicher" project is part of Mittelstand-Digital. With the SME Digital Network, the Federal Ministry for Economic Affairs and Climate Protection is supporting digitalization in small and medium-sized enterprises and the skilled trades. With the SME Digital Centres and the IT Security in Business Initiative, the SME Digital Network offers comprehensive support for digitalization. Small and medium-sized enterprises benefit from concrete practical examples and tailor-made, provider-neutral offers for qualification and IT security. The Federal Ministry for Economic Affairs and Climate Protection enables the use of the Mittelstand-Digital services free of charge. Consortium: University of Paderborn (consortium lead) University of Hohenheim InnoZent OWL e.V. Coactum GmbH (subcontracts)

Goals and procedure

The KMU.kompetent.sicher project aims to implement a long-term, competence-oriented and low-threshold IT security qualification for employees and managers in small and medium-sized enterprises (SMEs). The following priorities are set:

1. Qualification of managers: Managers acquire NIS2-compliant skills to communicate the company's IT security goals, analyze threat situations and initiate necessary security measures. The training modules teach both strategic and analytical skills.

2. ITS training for employees: Employees receive tailored online training in the form of learning nuggets that are easy to integrate into their day-to-day work. A test procedure determines individual qualification requirements in order to impart specific skills to avert IT security threats.

3. Sustainable skills development and ITS culture: A control loop for sustainable IT security development is supported by platform-based management tools. This includes a management cockpit that maps processes such as initiation, needs assessment, evaluation and concrete proposals for measures and provides structural support for managers in their management tasks.

Overall, the project promotes a systematic IT security culture in SMEs through target group-specific training and strategic integration of management tools.