Audit and Cybersecurity Trainings

The cybersecurity market in French-speaking Switzerland in 2026

Cybersecurity has become a strategic topic for all Swiss organisations. The multiplication of cyberattacks, the rapid evolution of the regulatory landscape (revised LPD, European GDPR, NIS2), cloud migration and AI integration in information systems create strong demand for certified profiles. Geneva and Lausanne organisations, particularly active in finance, watchmaking and pharma, recruit security engineers, CISOs, IT auditors, SOC analysts and compliance managers.

A recognised cybersecurity training opens access to better-paid strategic positions and to better professional prospects. Flagship certifications (CISSP, CISA, CISM, ISO 27001 Lead Implementer) remain essential for responsibility positions, and CompTIA Security+ has become the obligatory step for reskilling or junior profiles. ITTA offers a catalogue of training courses in this domain, delivered by consultants active in real security projects in Swiss and international organisations.

A recognised cybersecurity certification is one of the most rewarding professional investments: demand widely exceeds supply in French-speaking Switzerland, and associated salaries are among the most attractive in the IT sector.

Whether you become a CISO, prepare a CISSP certification or strengthen your SOC team, our cybersecurity training gives you the methods, tools and practice needed to effectively manage information system security and align with current Swiss and European regulations.

cybersecurity: a complete journey by axis

CISO and security architect certifications

The reference certifications for strategic profiles are CISSP (Certified Information Systems Security Professional) for architects and CISOs, CISM (Certified Information Security Manager) for management-oriented security managers, and CISA (Certified Information Systems Auditor) for IT auditors. These ISACA and ISC2 certifications remain the most globally recognised and require prior experience in information security. They are required by most large Swiss organisations for security management positions.

ISO 27001 and compliance

The ISO 27001 framework has become a standard to structure an information security management system (ISMS). ISO 27001 Foundation provides the basics for beginners or contributors to a certification project. ISO 27001 Lead Implementer targets implementation managers and ISO 27001 Lead Auditor addresses external or internal auditors. These PECB or DNV certifications are particularly appreciated in regulated sectors (banking, health, public services).

Microsoft Security and identity

Microsoft 365 and Azure security is central for most Swiss organisations. Microsoft Security Compliance and Identity Fundamentals (SC-900) is the no-prerequisite introduction covering the Microsoft security ecosystem. For more advanced profiles, SC-200 (Security Operations Analyst), SC-300 (Identity and Access Administrator) and SC-400 (Information Protection Administrator) target Microsoft 365 and Azure security engineers.

CompTIA Security+ and fundamentals

CompTIA Security+ is the most recognised entry-level cybersecurity certification. It covers essential concepts: cryptography, identity management, network security, incident management, regulatory compliance. This course targets reskilling profiles, system administrators adding security to their toolkit and junior SOC analysts. It is an excellent foundation before aiming for CISSP.

Adapt your path to your situation

A junior or reskilling profile typically starts with CompTIA Security+ to validate the basics. To progress, the technical path goes through operational certifications (SC-200 Microsoft Sentinel, Cisco SCOR, red team and pentesting training). The management path aims for CISM or CISSP. The audit path targets CISA and ISO 27001 Lead Auditor. The compliance path combines ISO 27001 Foundation then Lead Implementer, complemented by GDPR and digital law. For CISOs, combining CISSP + CISM + ISO 27001 Lead Implementer is particularly complete and recognised.

Broadening your cybersecurity scope

Cybersecurity is inherently cross-functional. Cloud computing training brings the cloud security dimension, particularly important with workload migration to Azure and AWS. Systems and networking covers infrastructure fundamentals essential to understanding security architectures. Ethical hacking training offers a complementary offensive approach essential for pentesters and red teams. The GDPR and compliance domain deepens the European and Swiss regulatory framework for DPOs and legal officers. The AI governance and responsible AI training addresses new risks linked to generative AI.

cybersecurity: where the market is heading

Cybersecurity evolves rapidly with new threats and regulations. Zero Trust has become an essential architectural framework, progressively replacing classic perimeter architectures. Cloud security (CSPM, CNAPP) gains importance with the generalisation of multi-cloud environments. Generative AI and LLM security becomes a strategic topic for CISOs. The NIS2 directive imposes reinforced obligations on essential operators and their providers. Finally, SOC automation via SOAR and the use of AI for threat detection transforms operational practices.

cybersecurity sessions on-site and virtual

All our cybersecurity training courses are available on-site in our Geneva (Route des Jeunes 35) and Lausanne (Avenue de Mon-Repos 24) centres, as well as in interactive virtual classroom. Our sessions open every 5 weeks, so you can start your training when it suits you. The deliberately modest size of our groups guarantees attentive support, and each course includes hands-on labs and case studies from real enterprise security projects.

ITTA expertise in cybersecurity

ITTA is a certified training centre based in French-speaking Switzerland, partner of major cybersecurity certification bodies: ISO/IEC, CompTIA, ISACA and Microsoft. Our trainers are consultants active in major cybersecurity projects for Swiss organisations, allowing them to share current concrete cases and adjust content to your professional reality. The cybersecurity catalogue regroups our training courses covering the most recognised market certifications. Our team can guide you towards the funding solutions suited to your case.

Featured courses in this catalogue

Here is a selection of reference training courses in this catalogue, accessible directly:

• Secure cloud resources with Microsoft security technologies (AZ-500)
• Certified in Risk and Information Systems Control – CRISC
• Certified Information Systems Security Professional – CISSP
• ISO/IEC 20000 Foundation
• ISO/IEC 22301 Lead Auditor
• ISO/IEC 22301 Lead Implementer
• ISO 27001 Foundation
• ISO 27001 Lead Auditor

FAQ

Where to start in cybersecurity without prior experience?

CompTIA Security+ is the most recognised entry point for reskilling profiles. It covers essential concepts and provides a complete view without advanced prerequisites. Continue with ISO 27001 Foundation for the risk management dimension, then specialise according to your orientation (technical, audit, compliance, management).

CISSP or CISM to become CISO?

CISSP is broader and technically detailed, ideal for very technical architects and CISOs. CISM is more oriented towards governance and management, particularly suited to CISOs leading security programmes and teams. Many confirmed CISOs hold both certifications, which complement each other perfectly.

How long to obtain ISO 27001 certification?

ISO 27001 Foundation is prepared in 3 days and provides the basics to pass the exam. ISO 27001 Lead Implementer requires 5 days of training and prior experience in compliance projects. ISO 27001 Lead Auditor is for auditors and also requires prior experience. With review, expect 4 to 8 weeks between the start of the training and obtaining the certification.

What professional funding options are available?

Several professional funding solutions can be considered depending on your situation and your employer. Our team helps you identify the options that fit your profile.