--- title: "Compliance: articles and guides, page 2" description: "Articles in the Compliance category: guides, news and analysis from our team on information security and compliance. Page 2." canonical: https://www.aegister.com/en/cms/category/compliance/page/2/ url: /en/cms/category/compliance/page/2/ lang: en --- ![](https://www.aegister.com/static/images/header-news.webp) # Compliance ## All articles September 27, 2026 ### [ACN NIS Vademecum 2026: Compliance Calendar and Operational Checklist](https://www.aegister.com/en/cms/insights/acn-nis-vademecum-2026-compliance-calendar/) ACN's NIS Vademecum 1.0 (September 2026) puts the NIS obligations on one calendar: six obligation families, three recurring annual windows and differ… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +7 September 27, 2026 ### [NIS Entity List Update: Late Registrations, Reviews and the 2027 Window](https://www.aegister.com/en/cms/insights/nis-2027-entity-list-reinforced-measures-registration/) On 18 September 2026 ACN announced an update of the NIS entity list after more than 2,000 late registrations and about 2,000 reviews, and confirmed t… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +6 September 24, 2026 ### [The cloud and cybersecurity voucher and NIS 2 technical measures](https://www.aegister.com/en/cms/insights/cloud-cybersecurity-voucher-nis2-baseline/) Part of the technical measures common to NIS 2 alignment programmes falls within the eligible product and service types: perimeter protection, monito… backup and recovery voucher eligible voucher types ineligible voucher expenses +5 September 24, 2026 ### [Cloud and cybersecurity voucher: disbursement, variations and controls](https://www.aegister.com/en/cms/insights/cloud-cybersecurity-voucher-reporting-disbursement/) The grant is not paid in advance: it is disbursed against completion of the plan and its documentation. This guide covers the assessment deadline, th… 60-day assessment cloud voucher controls CUP expense documents +5 September 24, 2026 ### [Cloud and cybersecurity voucher: who can apply, requirements and de minimis](https://www.aegister.com/en/cms/insights/cloud-cybersecurity-voucher-requirements-de-minimis/) Eligibility is set by article 4 of the ministerial decree of 18 July 2025 and must be met when the application is submitted. This guide sets out who … 30 Mbps connectivity catastrophe insurance cover cloud voucher requirements +7 September 24, 2026 ### [Cloud and cybersecurity voucher: composing the spending plan](https://www.aegister.com/en/cms/insights/cloud-cybersecurity-voucher-spending-plan/) The spending plan determines the grant, the completion deadlines and what will have to be reported. This guide explains the 30% limit on macro-catego… 24-month subscription voucher 30% macro-category E limit ineligible voucher expenses +5 September 24, 2026 ### [Cloud and cybersecurity voucher: how the application is submitted](https://www.aegister.com/en/cms/insights/cloud-cybersecurity-voucher-how-to-submit-the-application/) The procedure has two phases three weeks apart. From 20 October 2026 the application is filled in, the PDF form generated, digitally signed and the p… application compilation 20 October 2026 application preparation code cloud and cybersecurity voucher +7 September 09, 2026 ### [MIMIT cloud and cybersecurity voucher: guide to the measure](https://www.aegister.com/en/cms/insights/mimit-cloud-cybersecurity-voucher-2026-italian-smes/) The measure supports demand for cloud computing and cyber security services from SMEs and self-employed workers with a non-repayable grant of 50% of … approved supplier list MIMIT cloud and cybersecurity voucher cloud voucher requirements +7 April 29, 2026 ### [Cybersecurity Audit: What It Is, How It Works, and How to Prepare](https://www.aegister.com/en/cms/insights/cybersecurity-audit-types-phases-preparation/) A cybersecurity audit checks whether security governance, controls, evidence and technical practices are suitable for the chosen framework. This guid… [Documentation audit](https://www.aegister.com/en/cms/keyword/documentation-audit/) ACN baseline audit audit findings +7 April 29, 2026 ### [Cybersecurity Frameworks Compared: NIST CSF, ISO 27001, NIS 2, ACN Baseline](https://www.aegister.com/en/cms/insights/cybersecurity-frameworks-nist-iso-27001-nis-2-acn-comparison/) NIST CSF, ISO/IEC 27001, NIS 2 and the ACN baseline solve different problems. This comparison explains which are voluntary, mandatory, certifiable, o… [ISO 27001](https://www.aegister.com/en/cms/keyword/iso-27001/) ACN baseline compliance framework +7 April 28, 2026 ### [EU AI Act: Cybersecurity Implications for Compliance Teams](https://www.aegister.com/en/cms/insights/eu-ai-act-cybersecurity-implications/) Focused guide to the cybersecurity implications of the EU AI Act for compliance teams, including staged application dates, high-risk AI controls, and… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [Cyber Resilience Act](https://www.aegister.com/en/cms/keyword/cyber-resilience-act/) AI Act cybersecurity +8 April 25, 2026 ### [Cyber Resilience Act (CRA): Obligations for Software and Hardware Manufacturers](https://www.aegister.com/en/cms/insights/cyber-resilience-act-cra-obligations-manufacturers/) Explainer on the Cyber Resilience Act for software and hardware manufacturers: scope, application dates, reporting, vulnerability handling, conformit… [Cyber Resilience Act](https://www.aegister.com/en/cms/keyword/cyber-resilience-act/) CE marking cybersecurity cybersecurity by design +6 April 23, 2026 ### [NIS 2 vs GDPR: Key Differences and Overlap for Italian Organizations](https://www.aegister.com/en/cms/insights/nis-2-vs-gdpr-comparison-italian-organizations/) Comparison guide for Italian organizations: how NIS 2 and GDPR differ, where they overlap, and how to coordinate incident notification when personal … [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Incident notification](https://www.aegister.com/en/cms/keyword/incident-notification/) +7 April 21, 2026 ### [NIS Activity and Service Categorization: ACN Publishes the 2026 Model](https://www.aegister.com/en/cms/insights/nis-activity-service-categorization-acn-2026-model/) On 24 April 2026, ACN published Determination 155238 with the categorization model for NIS activities and services. The 2026 platform window runs fro… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) Annex 1 +9 April 18, 2026 ### [Italian Cyber Security Perimeter (PSNC): Scope, Obligations, and NIS 2 Coordination](https://www.aegister.com/en/cms/insights/psnc-italian-cyber-security-perimeter/) Guide to the Italian National Cyber Security Perimeter: scope, main obligations, incident notification, security measures, ICT supply controls, and c… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) ACN perimeter critical infrastructure +8 April 16, 2026 ### [NIS Representative in Italy: When It Is Needed and How the Designation Works](https://www.aegister.com/en/cms/insights/nis-representative-italy-designation-process/) The Italy-based NIS representative is a specific cross-border compliance mechanism for legal persons with no EU establishment that perform the inhere… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [Determinazione 127437/2026](https://www.aegister.com/en/cms/keyword/determinazione-1274372026/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +7 April 16, 2026 ### [ACN NIS Platform: Activity and Service Categorization](https://www.aegister.com/en/cms/insights/acn-nis-platform-activity-service-categorization/) Articles 20 and 21 of ACN Determinazione 127437/2026 define the procedural side of activity and service categorization on the NIS platform: window 1 … [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [Determinazione 127437/2026](https://www.aegister.com/en/cms/keyword/determinazione-1274372026/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +8 April 16, 2026 ### [ACN NIS Platform: Relevant Suppliers and What Organizations Must Submit](https://www.aegister.com/en/cms/insights/acn-nis-platform-relevant-suppliers-filing/) The ACN platform requires NIS subjects to submit a filtered list of 'relevant NIS suppliers' during the annual update window (15 April-31 May) - not … [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [Determinazione 127437/2026](https://www.aegister.com/en/cms/keyword/determinazione-1274372026/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +8 April 15, 2026 ### [ACN NIS Platform: Registration, Annual Update, and Continuous Update](https://www.aegister.com/en/cms/insights/acn-nis-platform-registration-annual-continuous-update/) The ACN NIS platform operates a recurring compliance cycle: registration (1 January-28 February), annual update (15 April-31 May), and continuous upd… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [Determinazione 127437/2026](https://www.aegister.com/en/cms/keyword/determinazione-1274372026/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +8 April 15, 2026 ### [ACN NIS Platform Roles, Access, and User Association](https://www.aegister.com/en/cms/insights/acn-nis-platform-roles-access-user-association/) The ACN platform determination defines a governed role model for NIS compliance: point of contact, substitute, CSIRT contact, segreteria, and operato… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [Determinazione 127437/2026](https://www.aegister.com/en/cms/keyword/determinazione-1274372026/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +8