Organisation type
Cybersecurity Seminar instructors
The problem
While the seminar is adapted for a client, a line changes outside the swap table, or a regulation cited from memory or from an AI text slips in: a number that is not in the references file, or Law 9887/2008 and Law 2/2017 named as if in force, though both have been repealed. The citation looks complete, so nobody opens it. After the first episode, the manager asks for the quiz results by person, to know who needs help.
26 courses · 1 specific to this profession
A process from your work
How long does your team take to resolve a security incident?
- Step 1The tool summarises the alerts, proposes the analysis steps and drafts the incident report.
- Step 2The analyst verifies every conclusion in the system's own data before acting.
- Step 3The notification deadline, recipient and article come from the law in force, not from the tool.
- Where the tool goes wrongThe answer cites a repealed law and does not give the reporting deadline in force.
- The verification stepOpen the law in force on qbz.gov.al and compare the article, deadline and recipient.
More: what was measured and the full check
What changed, as measured
Organisations that adopted a generative AI security assistant saw their mean time to resolve incidents fall by 30.13%.
Who was measured: Security operations centres of organisations using one vendor's security platform, adopters of its AI assistant compared with non-adopters over several months.
The caveat: The tool maker's own study; it shows an association in observational data, not proof of causation.
The check, step by step
- Open the law on qbz.gov.al, in the consolidated version in force, not a summary.
- Check that the law cited to you is still in force: find the article on repeals in the newer law.
- Find the reporting article and compare the deadline, the recipient and the article with what the tool gave you.
- In your internal procedure, write down the law, the article, the deadline and the date you checked them.
The Cybersecurity Seminar takes a team through incidents in four one-day episodes; the training prepares the person who runs it.
We can help you with this process: “Running the Cybersecurity Seminar”, 6 hours.
A verified example
The deadline for reporting a cyber incident
From an AI assistant's answer to the security officer of a critical information infrastructure operator, who asked how soon an incident must be reported, to whom, and under which article.
Verified on 28 September 2026, ten times per model.
Why it is easy to miss
The answer looks complete: a law, an authority, an article. But Law no. 2/2017 was repealed by Law no. 25/2024, Article 49, and the deadline is not given. The law in force, Article 23 point 3, requires every incident to be reported within 4 hours of identification, to the National CSIRT and the sectoral CSIRT. Of 30 answers tested, none gave 4 hours; 29 gave 24 or 72 hours.
Verified on 28 September 2026, ten times per model, with the same question word for word: Claude Haiku 4.5 10/10; Claude Sonnet 5 10/10; Claude Opus 5.5 10/10. Law no. 25/2024 on cybersecurity, Article 23 point 3 and Article 49 (QBZ, text in force).
What it looks like
From the AI assistant's answer… 4. The specific article: the main provisions on the duty to notify incidents are in Article 21 and following of Law no. 2/2017 (the chapter on security measures and incident reporting).
Translated from the Albanian original.
The Cybersecurity Seminar for your team
Four episodes of one day each, for an organisation. This workshop is offered on its own; the training below prepares the person who runs it.
Courses for this type of organisation
Training for the Cybersecurity Seminar instructor: four episodes, five rules, six sector versions, the client kit and aggregate reporting. Exercises use a fictional company, not real incidents or people.
What you leave with
The intake form, completed for each client before the day, with the swap table: every changed line, and every legal reference with its document, number, year and article from the references file and the result of its check. Beside them sit the seminar summary, counts and shares only, where each team under ten appears only in the All column, and the report template the instructor shows when a manager asks for names. If another instructor takes over the seminar, the work picks up from here.
Cybersecurity Seminar instructors
The catalogue lists all 26 together, with filters for format and time.