Problem viewing email? Click here to view it online.



CISOinSMEs (Certified Information Security Officer in SMEs) the training in Information Security adapted to SMEs.


Why is this CISOinSMEs necessary?

There are more than 20 million enterprises in EU, and over 99,8 % are SMEs (less than 250 employees). However inside the SMEs sector, 92 % are micro enterprises (MEs), with less than 10 employees. The trend is that the number of SMEs grows, and do it faster than the rest of other enterprises with more employees.
ICT (Information and Communication Technology) functions are generally outsourced, and key decisions are taken directly by owners or managers.
Analysis carried out by our partners have shown that there is a shortage of adequate training for these people, since most of the training courses in Information Security are aimed at highly qualified personnel.

What are the objectives & aims of the project?

The aims are to develop the necessary tools in order to the European SMEs receive an adequate Information Security training according to their necessities and level of knowledge.
The project intends to create a training curriculum for trainers wich consist on an online platform, online classes and e-learning. This training will be certifiable by VCC (Vocational Competence Certificate) and each person who completes the course will be given a certificate verifying their skills in Information Security for SMEs.

What is VCC?

Vocational Competence Certificate (VCC) is a uniform standard of certifying vocational competences acquired outside the formal education system, developed in Poland by the Institute VCC.
VCC Institute has conducted analyses involving monitoring requirements and the needs of the labour market as well as analysing competences and the needs of various areas of professional activity.
VCC confirms the already acquired qualifications in non-formal and informal systems and corresponds with assumptions of EUROPE 2020 Strategy.

Who is this project aimed to?

The main objective of this project is the staff of SMEs that take decisions on ICTs, particularly MEs that find greater difficulty in obtaining adequate formation to their level of knowledge.
It is also aimed at all those organizations or institutions that want to offer their users SMEs oriented training in ICT security.


The VCC model is based on both e-learning modules and classroom training. The training ends with an exam and a certificate.
The model training consist of:
  • Theoretical Professional Competences
  • Practical professional Competences
  • Linguistic Competences
  • Computer Science Competences
And the mains goals of the training are:
  • Awareness in Information Security
  • Acquire skills to take ICT decision
  • Methodologies adapted to SMEs for Risk Analysis
  • Develop a security information plan for your company

PROJECT PARTNERS: who is taking part?

The partners involved in the project have extensive experience in various fields of ICT as vocational education and training, business consulting, curricula development, training and education, new technologies and Information Security. They have also actively participated in previous European projects.
This project is developed by 8 partners (6 main partners and 3 associated partners) from 7 different communitarian countries (Poland, Italy, Austria, Greece, Bulgaria, Spain and Romania).
The main partners are:


Syntea S.A.has been operating on the education market for over 10 years. The competence delivery system including training courses, certification, apprenticeships, internships, practical placements, and employment exchange activities allows us to guide our customers, i.e. natural persons, companies, institutions and organisations, through the entire education process, starting from analysing competence predispositions, delivering training courses, providing career advising services, organizing vocational practice, to finding and optimizing a job. The system developed by Syntea is compliant with the idea of occupational mobility of employees and adapted to the most crucial directions of the European and global education policy.
During our activity we have already acquired over PLN 65 mln for implementing local, national and international education projects, trained over 45 000 individuals and issued over 50 000 certificates. Syntea Education Partners includes over 100 public and commercial entities operating on the education, advising, and labour markets in Poland and abroad, especially in the East-Central Europe.
More information about SYNTEA S.A.:
ul. Wojciechowska 9a, floor III
20-704 Lublin


CONFORM is a network of national and international public/private organisations (Institutions, Universities, Training Organisations, Research Centres, Banks, Enterprises, Employer associations, international voluntary associations) that for years has promoted the development of a lifelong learning culture at national/international level. Over the years, Conform has obtained considerable experience in continuing training for people of different vocational profiles ranging from specialised technicians, to middle managers and employees in a wide variety of sectors (tourism, industry, credit, health etc.).
In doing so, it has consolidated experience in research, innovation and implementation of e-learning and multimedia training resources of high pedagogic and technological added value based on the “Vocational training value chain” from needs analysis to evaluation of learning outcomes (including project design and delivery).
More information about CONFORM:
Collina Liguorini
Centro Direzionale Banca della Campania
83100 Avellino


Hafelekar Consultancy, established in 2001, is specialized in personal and organizational development, regional development, qualitative and quantitative social research and project management. Our customers are private, public and NPO´s in Austria, Germany and Italy.
EU Projects: Our team is experienced in the development, application, realization and evaluation of EU-funded projects with expertise in lifelong learning, informal and non formal learning processes and instruments of career guidance. In our projects we focus on designing instruments of vocational assistance and lifelong learning, development of e-learning as well as research and analysis of training demands and evaluation.
More about Hafelekar:
Hafelekar Consultancy Schober Ltd.
Maga. Karin Lackner
Bozner Platz 5
6020 Innsbruck


IDEC S.A. is a consultancy, high tech and training company based in Piraeus Greece. It is active in both the Greek and the transnational market. Being established in 1989, it has achieved a combination of experience and know-how accumulated over the years, with the ideas and innovation of its young collaborators. IDEC has a wide range of expertise and products in a broad spectrum of topics. Our customer focused approach, provides our customers with a unique set of all-round services and assists them in building the future they want.
For more information about IDEC S.A.:
96, Iroon Polytechniou Avenue
18536 Piraeus


Association GENERATIONS is a non-profit organization located in Sofia, Bulgaria.
We work to promote the entrepreneurship by supporting enterprises trough orientation, counseling and assistance to maximize skills and capabilities and guarantee sustainable development. We have focused our activities on employees 50+, a variety of topics related to an aging workforce - to develop and realize soft skills trainings, incl. diversity management, to enhance work-life balance and the compatibility of work with care-giving responsibilities. We try to assist the process of managing the differences in the light of the demographic changes by offering training and counseling to the business and support to companies, institutions and individuals for their approval in a highly competitive environment.
We do research, develop and implement the experiences, principles and policies, connected with coexistence and communication between different communities, the principles of civil society and gender mainstreaming, European policies and values, contributing to building social bridges.
Our Association is member of ALDA - the Association of Local Democracy Agencies and of the European EMIL Network( with focus on the establishment of intergenerational working groups for initializing regional development activities.
We has been certified after a LQW system – a German quality management standard developed especially for VET institutions.
More information about Association Generation in:
Association Generations
124-B Tsar Samuil Str.
1202 Sofia
Email:< br/>


IDN integral services is a SME specialised in advising, design, management and integration and implementation of Information Security solutions and communications networks with special interest in taking part in project intended to develop new security solutions for SMEs and public bodies.
The main part of our activity is in relation to develop new products and competitive solutions with the aim of helping SMEs to improve their management system.
IDN was the sixth Spanish enterprise acquiring the certification of its ISMS under the ISO 27001 in 2005. Apart from that, currently IDN is working on integral security systems services and training actions intended to increase awareness of e-trust among private and public sector in Castilla La Mancha Region.
More information about IDN:
Poeta García Carbonell 8 bajo
02006 Albacete
CISO - Project Nr.: 2013-1-PL1-LEO05-37738
This project has been funded with support from the European Commission. This publication reflects the views only of the author, and the Commission cannot be held responsible for any use which may be made of the information contained therein.