A cybersecurity training programme for an IT department

Collage: a trainer addresses members of an IT department while a staircase of modules rises beside her.

Key facts

Client: French public financial institution
Sector: Public finance
Period: September 2023 – 2025
Practice: Cybersecurity Governance
Offers: Trusted Assessment, Trusted Organisation

In figures

of the three-year programme delivered in the first year: 40%
IT staff to train: 130+
person-days of classroom training over three years: 1,300
person-days of e-learning: 200

The challenge

After an audit by its supervisor, the IT department of a public financial institution had to strengthen its cybersecurity culture, train all its teams and prepare for DORA, while headcount was falling, other mandatory training filled the calendar and the workload put operations first.

Train more than 130 people (full-time equivalents).
Deliver 1,300 person-days of classroom training and 200 person-days of e-learning over three years.
Tailor content to each profile (technicians, managers, business staff) and measure the adoption of new practices.

What we did

Needs assessment, programme and module design, budget and negotiation with training providers (September 2023 – June 2024).
Logistics and session management, programme governance, attendance and evaluation tracking, reporting (2024 – 2025).
Handover to the client, who now runs the programme on its own.

What changed

40% of the three-year programme delivered in the first year.
Measurably better awareness of cyber risks.
New security practices adopted in IT projects, such as security integration in projects (ISP).

A needs assessment (Trusted Assessment), then the Train activity of Trusted Organisation: the target governance rests on the real skills of the teams who run it.

All case studies

Other case studies

From audit to ISO 27001 certification for a 100‑person IT services company
Governance and architecture delivered together: a 105‑document information security management system, a security architecture rolled out in stages, and ISO 27001 certification achieved.
ISO 27001 certification achieved
25 secured application architectures for a public transport operator
Within the architecture team of a major public transport operator, Blooo assesses, designs and maintains the security of the applications with the highest cybersecurity requirements.

A similar challenge?

Tell us about your context: an expert will get back to you.

or write directly to trust@blooo.io

Reply within 24 hours
Non-disclosure agreement on request, before any exchange
First call of 30 minutes

Your e-mail is sent from your own mail client: blooo.io stores nothing. We only use your details to reply to you. Privacy policy.