14 - 18 Sept 2026· 4 days
Online · Online · EN
Cyber, GRC and AI governance certifications, taught by a working CISO. Live cohorts on confirmed dates, self-paced any time, in-house when it makes sense.

CISA: Certified Information Systems Auditor
PECB
Gold
ISACA
ATO
0+
Professionals trained
Across Europe, in person and online
0
Accredited training ecosystems
PECB and ISACA official programmes
0+
Cohorts completed
Live cohorts and in-house
Live · Confirmed dates
14 - 18 Sept 2026· 4 days
Online · Online · EN
4 days
€2,900
4 days
€2,900
4 days
€2,900
Why Cyber Academy
Cyber Academy is led by active GRC practitioners, including a working CISO. Trainer experience and course ownership are shown for the relevant programme. Three commitments guide our delivery:


Why Cyber Academy
Practitioner-led delivery, with trainer experience shown for each confirmed programme.
Current GRC priorities
Six topics where regulators, auditors and boards are putting pressure today. Pick the one your audit is landing on; there's a certification path waiting.
Risk treatment, incident reporting and supply-chain duties under NIS 2, with scope and national implementation varying by jurisdiction.
See coursesOperational resilience for financial entities: third-party registers, ICT risk and threat-led testing, mapped where useful to ISO 27001.
See coursesRisk classification, ISO 42001 management system, transparency duties for general-purpose AI.
See coursesThe reference standard for ISMS. Compare Foundation, Lead Implementer, Lead Auditor and ISO 27005 risk-management paths.
See coursesRecords of processing, DPIA, lawful basis, AI Act interaction, CDPSE preparation. What changed since 2018, what auditors check now.
See coursesEnterprise risk management. Foundation, Risk Manager, Lead Risk Manager. Complements ISO 27005 and EBIOS RM.
See courses
Lead trainer
Christophe Mazzola
Active CISO · 20+ certifications
10+
years in the field
Your trainers
Cyber Academy was founded by Christophe Mazzola, an active CISO and author of Être en Cybersécurité. He continues to lead delivery with a small team, matching trainers to subjects they actively practise and naming the trainer when confirmed.
They trust us
From these companies and many more, in person and online, across Europe.
Testimonials
Field notes

01 Sept 2026
Nobody briefs the director before an ISO 27001 audit. Then the auditor asks about the management review. The six questions, the rules for the room, and the tricks that actually work.

24 Aug 2026
The Cyber Resilience Act reporting obligation starts on 11 September 2026, not 2027. It covers products you shipped years ago, it runs on a 24-hour clock, and ENISA's platform is still not public. Here is what you can actually finish before the date.

14 Aug 2026
AI is rewriting the CISO job description. Here’s what the next generation of CISOs will look like ; and why the role is shifting from technical guardian to cognitive leader.
The GRC Brief
What landed in regulation last week, the audit finding worth remembering, the template you can lift today. Written by our practitioners. Three-minute read.

Recognition, picking the right path, what happens if you fail, how to invoice, audit pressure, prices. The same questions every learner sends us. Read them, then book the cohort that fits.
Yes. We deliver official PECB and ISACA training tracks used internationally. The credential is issued by the relevant certification body, not by Cyber Academy.
Each course page lists prerequisites, target audience, and a 'when NOT to take it' section. If you're still unsure, book a free 20-minute discovery call: we'll match you to the path that fits your role, deadline and budget. We'd rather lose the sale than place you in the wrong cohort.
PECB and ISACA re-sit conditions vary by programme. We explain the applicable exam policy before purchase and provide targeted preparation when a re-sit is needed.
Yes. We invoice companies directly with VAT-compliant documents (or VAT-free under our Gran Canaria registration, depending on your tax rules). Billing terms, group pricing and the availability of a dedicated in-house cohort depend on the course and scope; they are confirmed on the course page, in the written proposal or the order summary. Send your requirement to support@cyberacademy.fr and we will scope it.
We run live cohorts every month and can confirm a private session for your team within 2 to 3 weeks if dates are tight. For a hard deadline (DORA Article 28, NIS 2 transposition, etc.), tell us in the first email and we'll prioritise scheduling and content tailored to your audit scope.
Yes. Current standard live and self-paced prices are published in EUR where a course can be booked directly. In-house, multi-seat and custom scopes receive an itemised quote because format, dates and headcount vary.
Confirmed cohorts on real calendars. Prices on the page. Exam and re-sit terms shown before purchase.