Cybersecurity Skills Shortage
The global cybersecurity workforce gap stands at over 4 million unfilled positions (ISC2 2024). Organisations that upskill internally close this gap faster and retain valuable employees long-term.
Training & Certification
Cybersecurity Training
Certified programmes for IT security professionals and newcomers from an AZAV-approved training provider, developed by experts who work in practice every day.
- AZAV Approved
- Education Vouchers: coming soon
- In-Person & Online
- 4
- Certified Programmes
- AZAV
- Approved Provider
- 500+
- Trained Professionals
- 8+
- Years of Experience
The Status Quo
Why IT security training is a necessity, not an option
The ENISA Threat Landscape report confirms: 80% of all successful cyber attacks exploit known vulnerabilities or human error. Certified training is the most effective countermeasure.
Regulatory Training Requirements
NIS-2, ISO 27001 and GDPR require documented training measures for security-relevant roles. Certified programmes provide the audit-proof evidence required by regulators.
The Human Attack Vector
Phishing, social engineering and password errors account for more than 60% of all security incidents. Trained employees recognise attacks before damage occurs.
Measurable Risk Reduction
According to the IBM Cost of a Data Breach Report, organisations with regular security training reduce their average breach costs by up to 38%.
Our Programmes
Four certified training formats - for different experience levels, learning goals and time budgets.
T.I.S.P. Certificate
German-language personal IT security certificate, tailored to German law and European requirements, hands-on.
Leistung entdecken
Pentesting Workshop
Methodology and practice of penetration testing - from reconnaissance to a signed-off report.
Leistung entdecken
IT-Grundschutz Practitioner
BSI-compliant hardening of IT systems - certified training based on the BSI IT-Grundschutz standard.
Leistung entdecken
E-Learning
Flexible online training for IT security - available at any time, individually scalable, SCORM-compliant.
Leistung entdecken
Funding & Approval
AZAV-approved training provider: funding coming soon
AWARE7 is an AZAV-approved training provider in Germany. Funding via education voucher or the Qualifizierungschancengesetz (Qualification Opportunities Act) is coming soon: individual course approval is still pending. We are happy to discuss other options such as the Aufstiegs-BAföG scheme.
Education Voucher (Bildungsgutschein):
Funding for job seekers and career changers through the Federal Employment Agency: coming soon.
Qualification Opportunities Act:
Subsidy for employed staff through the employer and the Federal Employment Agency: coming soon.
Continuing Education Scholarship:
Funding for young professionals after successful vocational training.
Aufstiegs-BAföG:
Individual funding for work-accompanying further qualifications.
Funding through the Federal Employment Agency and Jobcentres (education voucher, Qualification Opportunities Act): coming soon. AWARE7 is approved as a training provider under AZAV; approval of our courses for funding is to follow. Until then, funded participation is not possible.
AZAV
Provider approval
Certified under the German Accreditation and Admission Regulation for Employment Promotion
T.I.S.P.
TeleTrusT e.V.
Training provider recognised by DEKRA and TeleTrusT for the German-language IT security personal certificate
BSI
IT-Grundschutz
Training based on the BSI IT-Grundschutz Compendium and current qualification framework
ISO 27001
Lead Auditor
Instructors holding ISO 27001 Lead Auditor certification - hands-on from consulting practice
Which programme fits your goals?
In a 30-minute call we clarify which training matches your current role, prior knowledge and time budget.
Free · 30 minutes · No obligation
Comparison
Which programme suits you?
Four programmes, four target audiences. The overview helps you choose.
| Criterion | T.I.S.P. | Pentesting Workshop | IT-Grundschutz | E-Learning |
|---|---|---|---|---|
| Duration | 5 days | 2 days | 5 days | Flexible |
| Level | Expert | Advanced | Beginner | All levels |
| Certificate | DEKRA / TeleTrusT | AWARE7 participation | BSI personal certificate | AWARE7 participation |
| Price from | EUR 3,200 | EUR 1,490 | EUR 2,890 | on request |
| Format | In-person / Online | In-person / Online | In-person / Online | Online (Self-paced) |
| Ideal for | ISM, CISO, Consultant | Admins, Developers | IT Managers, Career changers | All staff |
Your Contact Persons
Our certified instructors advise you on programmes, funding and individual training solutions.
Managing Director of AWARE7 GmbH with many years of expertise in information security, penetration testing and IT risk management. Graduate of the Internet Security master's program at Westfälische Hochschule (if(is), Prof. Norbert Pohlmann). Bestselling author with Wiley-VCH and lecturer at the ASW-Akademie. His assessments of cybersecurity and digital sovereignty have appeared in Welt am Sonntag, WDR, Deutschlandfunk and Handelsblatt, among others.
IT-Grundschutz-Praktiker (TÜV) IT Risk Manager (DGI) § 8a BSIG Prüfverfahrenskompetenz Ausbilderprüfung (IHK) T.I.S.P. Board-Mitglied
M.Sc. in Internet Security (if(is), Westfälische Hochschule). COO and authorized officer (Prokurist) with expertise in information security consulting and security awareness. Junior professor (Nachwuchsprofessur) for Cyber Security at FOM Hochschule, CISO lecturer at isits AG and doctoral candidate at the Graduierteninstitut NRW.
ISO 27001 Lead Auditor (PECB/TÜV) T.I.S.P. (TeleTrusT) ITIL 4 (PeopleCert) BSI IT-Grundschutz-Praktiker (DGI) Ext. ISB (TÜV) BSI CyberRisikoCheck CEH (EC-Council)
Our Process
From Enquiry to Certificate
Five steps to a recognised qualification - we guide you through the entire process.
StepPhaseWhat happens
- 01
Initial Consultation
Together we identify which programme matches your goals, prior knowledge and available time budget.
- 02
Funding Options
We review available funding schemes and support you through the application process.
- 03
Registration & Preparation
Book your preferred date, receive preparatory materials and access to the learning platform.
- 04
Training Week
Intensive training with certified instructors - hands-on, interactive and tailored to your questions.
- 05
Certification & Follow-up
Sit the exam, receive your certificate and book follow-up courses or advanced modules as needed.
Target Audience
Who are our programmes for?
IT Security Officers
ISMs and CISOs who want to demonstrate their qualification with a recognised certificate - T.I.S.P. or IT-Grundschutz Practitioner.
IT Administrators
System administrators who want to learn practical attack and defence techniques - Pentesting Workshop.
Executives & Management
Decision-makers who need to understand IT security risks and assess compliance requirements.
Compliance & Data Protection
Compliance managers and DPOs who want to deepen their knowledge of the technical side of information security.
Career Changers & Newcomers
IT professionals transitioning into cybersecurity - the IT-Grundschutz Practitioner is the ideal entry point.
All Employees
Security awareness via e-learning - scalable for the entire organisation, from reception to the board.
Organisations that trust AWARE7 training
Why AWARE7 as your training partner
What sets us apart from other providers
Pure awareness platforms don't test systems. Pure consulting firms are too far removed. AWARE7 combines both: we hack your infrastructure and train your employees: tailored to mid-sized companies, personal, without enterprise overhead.
Research and teaching as our foundation
20 %Around 20% of our revenue comes from research projects for the BSI and the BMBF. Our studies, published at ACM and Springer conferences, analyse millions of websites and tens of thousands of phishing emails. Three of our executives are professors at German universities at the same time.
Digital sovereignty: no compromises
100 %From first contact to final report, your data is stored on our own servers in Germany - no US cloud providers, no third-country transfers. Our AI also runs on our own hardware in Germany - with locally operated open-source models. Client and project data never reach external AI services. All staff are permanently employed, covered by social insurance and bound by uniform legal obligations.
More on digital sovereigntyFixed price within 24h: predictable project timelines
24 hWithin 24 hours you receive a binding fixed-price quote without hourly rate risk. A well-practised team and standardised processes ensure a clear schedule with a defined start and end date.
Your dedicated contact
1:1A personal project manager accompanies you from planning to evaluation. You book appointments directly with your contact person and keep the same contact throughout the project.
Peer-reviewed publications
Different Seas, Different Phishes - Large-Scale Analysis of Phishing Simulations
ACM AsiaCCS 2025
Oskar Braun, Jan Hörnemann, Norbert Pohlmann, Matteo Große-Kampmann
A Platform for Physiological and Behavioral Security
NSPW 2025
Jan Hörnemann
Privacy from 5 PM to 6 AM: Tracking and Transparency in the HbbTV Ecosystem
IEEE/IFIP DSN 2025
Jan Hörnemann, Norbert Pohlmann, Matteo Große-Kampmann
Understanding Regional Filter Lists: Efficacy and Impact
PoPETS 2025
Jan Hörnemann, Norbert Pohlmann, Matteo Große-Kampmann
Who is AWARE7 the right partner for?
- Mid-sized companies with 50-2,000 employees
- Companies that need real security, without paying for a DAX-corporation provider. Fixed price, clear scope, one point of contact.
- IT managers & CISOs
- Who have to argue convincingly in-house and need a report in boardroom language for that, not just technical findings.
- Regulated industries
- Critical infrastructure, healthcare, financial services: NIS-2, ISO 27001, DORA. We know the requirements and deliver evidence that auditors accept.
„Excellent coordination throughout, very good interactive training session.“
Renate S.
Healthcare Group
FAQ
Frequently Asked Questions About Our Training
Questions about funding, certificates, formats and prerequisites - answered here.
Does AWARE7 hold AZAV provider approval?
Yes. AWARE7 is approved as a training provider under AZAV (Accreditation and Admission Regulation for Employment Promotion). Funding via education voucher (Bildungsgutschein) from the Federal Employment Agency or a Jobcentre and via the Qualifizierungschancengesetz (Qualification Opportunities Act) is coming soon: individual course approval is still pending. Contact us about other options such as the Aufstiegs-BAföG scheme. Funding through the Federal Employment Agency and Jobcentres: coming soon.
Which delivery formats are available - in-person, online or hybrid?
We offer all three formats. In-person training takes place at our premises in Gelsenkirchen, Germany, or at your site. Live online sessions are delivered via a privacy-compliant platform hosted in Europe. Hybrid formats allow your team members to switch flexibly between in-person and online. The choice of format has no effect on the certificates issued.
What prior knowledge is required for the courses?
This depends on the programme. The IT-Grundschutz Practitioner assumes basic IT knowledge but is explicitly suitable for career changers from IT management. The Pentesting Workshop recommends experience with Linux and networking (CompTIA Network+ level). The T.I.S.P. certificate is aimed at experienced IT security professionals. E-learning modules are modular and available for every level of competence. We are happy to advise you in a free initial consultation.
What certificates are awarded on completion?
Upon successful completion of the T.I.S.P. programme, participants receive the German-language personal certificate of the same name from the TeleTrusT programme; it is issued by the certification body, for AWARE7 participants by DEKRA Certification GmbH. IT-Grundschutz graduates receive the BSI personal certificate "IT-Grundschutz-Praktiker". Pentesting workshops and e-learning programmes conclude with an AWARE7 participation certificate documenting the competences and content covered.
Can I book an in-house training course for my team?
Yes - all programmes can be delivered as a dedicated in-house course for your team. For groups of five or more, this is often more cost-effective than individual bookings. We tailor content, case studies and focus areas to your industry and system landscape. In-house training can take place at your site, in Gelsenkirchen or entirely online.
How long do the training programmes take?
Duration varies by programme: the IT-Grundschutz Practitioner covers 5 days of classroom training. The T.I.S.P. preparation programme runs over 5 days. Pentesting workshops last 2 days. E-learning modules are structured in units of 30-90 minutes and can be completed alongside regular work. On request, we create a schedule that fits your team's day-to-day operations.
Are there discounts for group or corporate bookings?
Yes, from 3 participants from the same organisation we offer tiered group discounts. From 5 participants an in-house training course is often worthwhile, which we tailor to your specific requirements. Contact us for an individual quote.
How does AWARE7 differ from other training providers?
Our instructors are not pure trainers: they work daily as penetration testers, ISO auditors and security consultants. This means every example, every case study and every discussion is based on current project experience. We are also AZAV-approved and provide funding advice from a single source.
Do I receive training materials after the course?
Yes, all participants receive comprehensive digital training materials that also serve as a reference guide after the course. For T.I.S.P. and IT-Grundschutz, you additionally receive exam preparation materials and access to our participant portal with updates and supplementary content.
Aus dem Blog
Weiterführende Artikel
Weiterbildung & Zertifizierung
5 Gründe warum ein IT-Security E-Learning vor Cyberattacken schützt!
Ein IT-Security E-Learning kann in Unternehmen zum Schutz vor erfolgreichen Cyberattacken eingesetzt werden. Das sind die Gründe!
Jan Hörnemann Weiterlesen
Offensive Security
9 Hacking Gadgets 2025: Lernen und Forschen
Entdecke 9 Hacking Gadgets und erfahre, wie du sie sicher, legal und verantwortungsvoll nutzt, um IT-Sicherheit wirklich zu verstehen.
Vincent Heinen Weiterlesen
Security Awareness
8 WeTransfer-Alternativen vorgestellt!
WeTransfer speichert teils Daten auf Servern in den USA. Das birgt Risiken und ruft WeTransfer-Alternativen auf den Plan.
Chris Wojzechowski Weiterlesen
Invest in your organisation's most valuable asset.
Certified IT security experts from within your own ranks are the most effective protection. We accompany your employees from entry level to recognised qualification.
Free · 30 minutes · No obligation
