Employee training

Data security is a shared responsibility between technology and people. At NDD, continuous skills development and employee awareness of data protection are fundamental pillars for ensuring compliance and security in all our operations. To this end, we use our own learning platform, the NDD Academy, where we offer a variety of training courses focused on information security and data protection.

Our goal is to ensure that all employees, regardless of their hierarchical level or function, are prepared to face security challenges and act in accordance with legal and market requirements.

The training courses offered are regularly audited to ensure that they are adapted to the evolution of the NDD. The main courses on offer include:

ISO 27001: trains employees to implement and maintain an Information Security Management System, covering policies and controls for protecting sensitive information.
Privacy by Design and Privacy by Default: teaches the integration of data protection from the outset of product and service development, ensuring that privacy is incorporated from conception to the day-to-day use of solutions.
Personal Data Protection (LGPD and GDPR): ensures that employees understand data protection regulations such as LGPD and GDPR, their responsibilities and the correct handling of personal data.
Business Continuity Plan (BCP): focuses on preparing the organization to respond to serious incidents, such as natural disasters or cyberattacks, guaranteeing the continuity of operations.
Secure Development: Enables developers to implement security practices in the software lifecycle. Focused on resolving vulnerabilities directly in the code, before releasing a new version to the client.

Employees are assessed at the end of each course, receiving certifications that prove their competence.

In addition to the training offered by the NDD Academy, NDD has a corporate social network with a community dedicated exclusively to Information Security. In this community, content related to data protection and cybersecurity is constantly updated, with knowledge pills and practical tips offered on a recurring basis. This space encourages the sharing of experiences and good practices among employees, keeping everyone up to date on the challenges and trends in the sector.

All of this is complemented by recurring meetings with the teams, in which we discuss crucial information security issues. These meetings strengthen knowledge about safe practices, update the team on new threats and help clarify specific doubts.

By training our employees, we ensure that everyone is prepared to recognize, prevent and respond to security incidents effectively. As a result, we maintain a safe working environment, in line with regulations and best data protection practices, minimizing risks and strengthening our clients' trust.