A set of slides for use by legal or compliance to train non-experts on information and cyber security in an organisation operating in a sector regulated under specific cyber security law. The training addresses key elements of an information and cyber security programme and should be customised according to an organisation's specific information security policy, legal and regulatory obligations, and culture.