Vibe coding, security regulations and AI governance in the EU: a 4-day live online programme for tech leads, product owners and compliance teams who build or ship software with AI. Limited to 16 participants.
Registration closes 22 November 2026
This date has passed. Request a new date – we will let you know as soon as it is set, or plan the programme for your team.
Your teams already code with AI. Do your security and governance keep up?
AI coding assistants and agents write a growing share of production code. At the same time, the EU is tightening the rules: NIS2, the Cyber Resilience Act and the AI Act bring new obligations for software, documentation and incident reporting. Speed and compliance often pull in opposite directions.
AI Security shows you how to use AI in development without losing control. You work on your own use case and leave with concrete guardrails, a clear view of which rules apply to your product and a governance framework you can roll out.
Core principle: Speed with AI, security by design, compliance on record.
Spot the risks of AI-generated code. Recognise typical vulnerabilities, leaked secrets, unsafe dependencies and prompt injection against coding agents.
Set up secure guardrails. Define reviews, tooling and policies that keep AI-assisted development fast and safe.
Know which EU rules apply. Classify your product under NIS2, the Cyber Resilience Act and the AI Act and derive the obligations that follow.
Build AI governance that works. Establish roles, documentation and an AI usage policy that hold up in audits and in day-to-day work.
Module 01
Risks and attack patterns of AI-assisted development, from insecure code suggestions to compromised dependencies and manipulated coding agents.
“How do we let teams code with AI without shipping vulnerabilities nobody understands?”
Module 02
NIS2, the Cyber Resilience Act and DORA: who is affected, which obligations apply to products and organisations, and how to prepare.
“Which security obligations apply to our product, and what do we need to prove?”
Module 03
Risk classes, roles as provider or deployer, AI literacy and documentation: a governance framework that fits your organisation.
“Are we a provider or a deployer, and what does that mean for our documentation?”
Experience in software development, product management, IT security or compliance is helpful.
Programme Director · Founder, CS Consulting
Industrial engineer and MBA in Information Systems (Bentley University, Boston). Trained at Volkswagen across six divisions, then founded CS Consulting in 2022. As Managing Partner, he helped build one of Europe's largest balcony-solar providers, with more than €100 million in revenue growth generated. He speaks on AI, search and marketing.
Christopher Specht is the founder and owner of his own management consultancy. Since 2022 he has advised corporations and emerging companies in the DACH region on strategic realignment and digital transformation, helping clients realise more than €100 million in revenue growth and establish themselves in their markets for the long term. As an industrial engineer, he led operational and strategic projects at Volkswagen AG in core areas such as finance IT, supply chain management and technical sales, building on corporate experience gained during his dual study programme. He graduated with High Distinction (GPA 4.0) and holds an MBA with a focus on Information Technology from Bentley University in Boston, as well as a double degree in industrial engineering (B.Eng.) from Hochschule Hannover and Tampere University. He serves as a civic ambassador of the Fulbright Association, for example at the Harvard Transatlantic Conference, and is a member of the Association of German Engineers (VDI). He is an alumnus of the McCallum Fellowship and of the IHK scholarship programme for gifted students.
You apply every module to a real product or project from your organisation.
See real attacks on AI-generated code and coding agents, and how to prevent them.
Practise in a prepared lab environment in the browser, with a technical and a governance track.
Take home templates for your AI usage policy, risk register and AI Act classification.
Certificate with a detailed competency grid.
Access to the alumni network and peer experience reports.
December 2026
Live sessions run from 9:00 to 13:00 CET; afternoons are for labs and optional office hours.
Free intro call. 20 minutes to clarify your role, your use case and your goals.
Confirmation of fit. If the programme fits, you receive the participation agreement.
Booking & invoice. Your place is confirmed once the agreement is signed. Invoice to your company on request.
Registration closes 22 November 2026.
€1,890
per person, incl. VAT
€1,606.50
per person, incl. VAT
15 % off for all participants from the same company when 3 or more book.
Up to 30 days before the start: full refund. 29 to 15 days before the start: 50 % refund. Less than 15 days before the start: no refund. A colleague from the same company can take your place at any time free of charge.
The programme runs live via video conference in a small group, with breakout rooms for labs and case work. Sessions are not recorded, so you can speak openly about your systems.
You need a laptop with camera and microphone and a stable internet connection. The lab environment runs in the browser – nothing to install on your company device.
English or German, depending on the group.
No. This lets everyone speak openly about their systems. You receive all slides, templates and lab instructions.
A laptop with camera and microphone, a stable internet connection and a current browser. No installation required.
No. The labs have a technical and a governance track. A basic understanding of software development helps.
No. The programme gives you a sound overview and practical tools. For specific cases, we recommend involving your legal counsel.
When 3 or more people from the same company book, all of them pay €1,606.50 instead of €1,890 (incl. VAT).
Yes. We invoice your company directly.
Up to 30 days before the start you get a full refund. See the cancellation terms under Admission & Fees.
Book a free 20-minute intro call. We'll check together whether the programme fits you and your use case. Registration closes 22 November 2026.
Registration for this date is closed. Write to us and we will get back to you as soon as a new date is set – or plan the programme for your team.
Request a spot Request a new dateOr write to info@christopherspecht.com
Thank you. We'll get back to you within two working days.