VairogsWithin 1 month
Initial instruction after a user account is granted — for a new employee or new access.
Vairogs Skola · Cybersecurity Instruction
Cybersecurity instruction that stands up to an audit.
A short, practical employee course in English or Latvian — with a test, a status dashboard, and the CSV/PDF records required by Regulation No. 397, sections 76–80.
- Modules
- 10
- Duration
- ~75 min
- Test
- 10 questions · pass at 80%
- Languages
- LV + EN
- Records
- CSV + PDF
From zero to a report — 4 steps
- Sign in with an email code.
- Create a company and add employees — up to 10 for free.
- Employees receive a private learning link with an LV/EN choice.
- The test is scored server-side; the report keeps status and date.
Regulation
The company needs verifiable records
Regulation No. 397 sections 76–80 require initial and annual cybersecurity instruction, current materials, training records, and knowledge assessment. Vairogs puts that into one flow.
Every year
Refresher instruction for all users of ICT resources and information systems — with a reminder.
Records + test
Status, date, attempts, score, and a CSV export to attach to the company cybersecurity file.
What Vairogs covers
- Initial and annual instruction (sections 76.1.1–76.1.2) — with date and status.
- Knowledge assessment (section 80) — a server-scored test with recorded results.
- Instruction records (section 80) — CSV/PDF with employee, dates, attempts and scores.
- Current materials available to all users (section 79) — the public module pages.
- Content review at least annually (section 78) — the course is versioned and updated.
What stays on the company side
- Separate training for ICT personnel on cyber-risk management (section 76.2) — this course does not replace it.
- Effectiveness evaluation (section 80) — we provide the data; the company documents the conclusion.
- Company specifics (section 76) — internal reporting channels and procedures must be added by you.
- Extraordinary instruction (section 76.1.3) — you can start a new round any time; the decision rests with your security manager.
- Critical-infrastructure extras (section 77) — account-granting rules must live in your access process.
Course
Curriculum
Ten short, practical modules based on current Latvian and EU threat data. The course and test run on a separate learning page.
- 01Why this instruction is requiredNKDL, Regulation No. 397, and practical proof for management.6 min
- 02Phishing: email, SMS, QR codes, and sign-in linksHow to recognise a message that looks like a bank, delivery service, Microsoft, or a manager.8 min
- 03Passwords, MFA, Smart-ID, and secret codesWhat must never be shared, even when the other person sounds convincing.7 min
- 04Phone calls, executive fraud, and deepfakesHow to stop a convincing person who rushes a payment or data transfer.8 min
- 05Malware and ransomwareAttachments, downloads, macros, remote access, and data leakage.8 min
- 06Updates, devices, and backupsSimple cyber hygiene that reduces most technical risk.7 min
- 07Data, clients, and documentsHow to avoid leaking personal data, trade secrets, and client information.8 min
- 08Remote work, SaaS, and cloud servicesSafe work outside the office and inside third-party tools.7 min
- 09AI tools and shadow AIWhat can be placed in a chatbot, what cannot, and how to verify output.7 min
- 10Incident reporting: the first 15 minutesWhat to do if you clicked, entered a code, sent data, or see strange activity.9 min
About 75 minutes in total. The test has 10 questions; pass mark 80%. Course version 2026.07.03.
Manager report
What remains in the company file
The CSV report is practical record-keeping material, not a decorative certificate.
| Employee | Invited | Completed | Attempts | Score | Status |
|---|---|---|---|---|---|
| a.ozola@company.lv | 2026-07-01 | 2026-07-02 | 1 | 92% | Passed |
| j.berzins@company.lv | 2026-07-01 | 2026-07-04 | 2 | 85% | Passed |
| k.liepa@company.lv | 2026-07-01 | — | 0 | — | Invited |
The export also includes: first opened, course title and version (2026.07.03), and language. Each employee gets a PDF attestation.
Attestation · exampleCybersecurity Instruction 2026
Anna Ozola · a.ozola@company.lv
Completed 2026-07-02 · Score 92% · Version 2026.07.03
Vairogs Skola · vairogs.lv/skola · saveable as PDFAfter passing the test, each employee receives a personal attestation that can be saved as a PDF for the personnel file.
Sources
Sources used
The course combines Latvian legal duties, CERT.LV signals, and international threat reports.
Cabinet Regulation No. 397, sections 76-80Requires initial and annual cybersecurity instruction, current materials, records, and knowledge assessment.National Cybersecurity LawDefines the Latvian cybersecurity framework and the local basis for NIS2 transposition.National Cyber Security Centre: NKDL/NIS2 stepsExplains that the National Cybersecurity Law entered into force on 2024-09-01 and Regulation No. 397 on 2025-07-02.CERT.LV: Latvia cyber space in Q1 2026Fraud and malicious code were among the largest Latvian threat groups; DDoS became a continuous resilience test.CERT.LV: Q2 2026 statisticsPublic statistics on 673 manually processed incidents and 535,909 warnings sent.CERT.LV: involving employees in cybersecurity managementEmphasises understandable procedures, no-blame reporting, and management example.CERT.LV: AS Latvijas valsts meži cybersecurity incidentA 2026 Latvian ransomware example covering data leakage, system shutdown, patching, and phishing risk.CERT.LV: Signal backup key scamA current example of scammers asking for secret recovery keys, one-time codes, or PINs.ENISA Threat Landscape 2025Covers vulnerability exploitation, supply-chain risk, and the growth of AI-supported social engineering.Verizon 2026 Data Breach Investigations ReportHighlights the human element, social engineering, stolen credentials, vulnerability exploitation, and ransomware.Europol IOCTA 2026Ransomware remains a dominant EU threat; attackers use supply chains and social engineering.Cabinet Regulation No. 749 on occupational safety trainingThis course does not replace occupational safety induction or workplace instruction.
Pricing
Clear prices, no surprises
Start free with a small team. For larger teams — an annual plan by invoice, activated within one business day of your request.
Free
€0
- Up to 10 employees per company
- LV + EN course, test, status dashboard
- CSV/PDF report and PDF attestations
- Annual refresher reminder
Team
€96/year
- Up to 50 employees per company
- Everything in Free
- Company invoice
- Priority email support
- Coming: role-specific modules (finance, IT, managers, customer service)
- Monthly threat briefing for employees — automatic, with read tracking
Company
€240/year
- Up to 250 employees per company
- Everything in Team
- Russian course version on request
- Custom CSV report fields
- Coming: ICT-personnel training module (section 76.2 duty)
- NKDC form generator — manager notification and incident reports pre-filled with your data
Prices are final — VAT is not applied (the provider is not a registered VAT payer). Activation without a card: activate instantly in the manager view; the invoice arrives by email. No auto-renewal surprises — we remind you before the term ends. Larger teams or public institutions — write to skola@vairogs.lv for individual terms.
For Companies
Ready for a larger client sales conversation
The self-service version gives a fast start. Enterprise options are kept separate and clear.
For Companies
Open manager viewStart with team instruction today.
Create a company, invite employees, and download the record report when instruction is completed.