1 month
Initial cybersecurity instruction after a user account is granted.
Vairogs SkolaCybersecurity instruction for Latvian companies.
Employees complete a short course and test in English or Latvian. The responsible manager sees statuses and downloads CSV evidence for the record-keeping duties in Regulation No. 397 sections 76-80.
This is a cybersecurity course. It does not replace occupational safety induction or workplace instruction.
Self-service startTraining with records
- Sign in with an email code.
- Create a company and add up to 50 employees.
- Employees receive a private learning link with LV/EN choice.
- The test is scored server-side and the report keeps the status.
10 modules10 test questions2026.07.02 version
Regulation
The company needs verifiable records
Regulation No. 397 sections 76-80 require initial and annual cybersecurity instruction, current materials, training records, and knowledge assessment. Vairogs puts that into one flow.
Every year
Refresher instruction for users of ICT resources and information systems.
Records + test
Status, date, attempts, score, and CSV export for the company file.
Manager report
What remains in the company file
The CSV report is practical record-keeping material, not a decorative certificate.
Employee emailInvite dateFirst openedCompletion dateAttempt countScore percentageCourse titleCourse version 2026.07.02
Course
Content based on current threats
Modules are short and practical: what to notice, what not to do, and what to do in the first minutes.
01 · 6 min
Why this instruction is required
NKDL, Regulation No. 397, and practical proof for management.
Open module ->02 · 8 minPhishing: email, SMS, QR codes, and sign-in links
How to recognise a message that looks like a bank, delivery service, Microsoft, or a manager.
Open module ->03 · 7 minPasswords, MFA, Smart-ID, and secret codes
What must never be shared, even when the other person sounds convincing.
Open module ->04 · 8 minPhone calls, executive fraud, and deepfakes
How to stop a convincing person who rushes a payment or data transfer.
Open module ->05 · 8 minMalware and ransomware
Attachments, downloads, macros, remote access, and data leakage.
Open module ->06 · 7 minUpdates, devices, and backups
Simple cyber hygiene that reduces most technical risk.
Open module ->07 · 8 minData, clients, and documents
How to avoid leaking personal data, trade secrets, and client information.
Open module ->08 · 7 minRemote work, SaaS, and cloud services
Safe work outside the office and inside third-party tools.
Open module ->09 · 7 minAI tools and shadow AI
What can be placed in a chatbot, what cannot, and how to verify output.
Open module ->10 · 9 minIncident reporting: the first 15 minutes
What to do if you clicked, entered a code, sent data, or see strange activity.
Open module ->Sources
Sources used
The course combines Latvian legal duties, CERT.LV signals, and international threat reports.
Cabinet Regulation No. 397, sections 76-80Requires initial and annual cybersecurity instruction, current materials, records, and knowledge assessment.National Cybersecurity LawDefines the Latvian cybersecurity framework and the local basis for NIS2 transposition.National Cyber Security Centre: NKDL/NIS2 stepsExplains that the National Cybersecurity Law entered into force on 2024-09-01 and Regulation No. 397 on 2025-07-02.CERT.LV: Latvia cyber space in Q1 2026Fraud and malicious code were among the largest Latvian threat groups; DDoS became a continuous resilience test.CERT.LV: Q2 2026 statisticsPublic statistics on 673 manually processed incidents and 535,909 warnings sent.CERT.LV: involving employees in cybersecurity managementEmphasises understandable procedures, no-blame reporting, and management example.CERT.LV: AS Latvijas valsts meži cybersecurity incidentA 2026 Latvian ransomware example covering data leakage, system shutdown, patching, and phishing risk.CERT.LV: Signal backup key scamA current example of scammers asking for secret recovery keys, one-time codes, or PINs.ENISA Threat Landscape 2025Covers vulnerability exploitation, supply-chain risk, and the growth of AI-supported social engineering.Verizon 2026 Data Breach Investigations ReportHighlights the human element, social engineering, stolen credentials, vulnerability exploitation, and ransomware.Europol IOCTA 2026Ransomware remains a dominant EU threat; attackers use supply chains and social engineering.Cabinet Regulation No. 749 on occupational safety trainingThis course does not replace occupational safety induction or workplace instruction.
For Companies
Ready for a larger client sales conversation
The self-service version gives a fast start. Enterprise options are kept separate and clear.
For Companies
Open manager viewStart with team instruction today.
Create a company, invite employees, and download the record report when instruction is completed.