Bestseller

CIRCIA Compliance Essentials

Master CIRCIA compliance - 72-hour incident reporting, 24-hour ransom reporting, data preservation, and incident response planning. For critical infrastructure.

★ 4.5 · 76 reviews10 lessons · 1.4hCertificate · 12 languages
Course overview

Inside this course.

This course covers compliance with the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA). You'll learn about the mandatory 72-hour reporting requirement for significant cyber incidents and the 24-hour reporting requirement for ransom payments. The course covers which entities must comply, what constitutes a reportable incident, data preservation requirements, and how to prepare your incident response capabilities for CIRCIA compliance. Includes an incident reporting playbook and internal escalation matrix you can customize for your organization.

Learn CIRCIA compliance: 72-hour incident and 24-hour ransom reporting, data preservation and incident response planning. Includes an incident playbook. For critical infrastructure sectors.

Built for compliance teams who need procedures that survive audit, not just theory. You'll work through 6 structured modules and 10 lessons (~1.4h) with downloadable templates and finish with a verifiable certificate of completion you can list on LinkedIn the same day.

What you'll learn

Outcomes, not just knowledge.

Best fit for
  • · Compliance leads, DPOs, risk managers
  • · Teams operationalizing this regulation
  • · Anyone who needs depth, not awareness
  • Determine CIRCIA applicability to your organization
  • Identify reportable incidents under CIRCIA
  • Meet 72-hour and 24-hour reporting requirements
  • Prepare incident response for CIRCIA requirements
Curriculum

Modules with 10 lessons.

Video, downloadable templates, and a workshop in every module. Updated quarterly.

Last updated · Oct 2026
  • 01Introduction and Scope
How we build courses

Built by a team, not one person.

Every course is co-authored by working practitioners and reviewed by external auditors. We update content quarterly so what you learn matches what regulators are enforcing.

L
Privacy lawyers
EU & UK qualified, IAPP-certified.
D
Practicing DPOs
Active DPOs at fintechs, healthtechs, public sector.
C
Compliance officers
Operationalizing compliance programs day-to-day.
A
Auditors & reviewers
Big-4 alumni who keep us honest.
Reviews · 76

From the people who finished it.

4.5
★★★★★
76 ratings
★★★★★

Finally a compliance course that gets to the point.

I've taken three courses on this regulation. This is the only one that actually shows you the workflows. The templates alone were worth the price.

Marta K. · Compliance lead, fintech
★★★★★

We rolled it out to the whole team.

The teaching style is exactly what compliance training has been missing. We bought 12 seats. Best money we spent in Q1.

Jonas H. · Head of Legal, SaaS
★★★★★

Saved us during a real incident.

Two weeks after finishing the course, we had to apply exactly what we learned. The runbooks and decision trees made it so much easier under pressure.

Amélie D. · Privacy counsel, healthcare
★★★★☆

Dense — in the best way.

Not a beginner course. If you already know the basics, this fills in every gap you didn't know you had. Quizzes are challenging.

Klaus M. · Compliance lead, manufacturing
FAQ

Common questions.

Anything else? Send us a note.

The Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) is a US federal law requiring critical infrastructure entities to report significant cyber incidents to CISA within 72 hours and ransomware payments within 24 hours.

Get this course for your team.

Contact us for access and pricing — for a single seat or unlimited access to all 350+ courses.