Compliance
All articles
New NIS Subjects in 2026: Incident-Notification and Baseline-Measure Deadlines
The ACN 2026 timing determination sets a distinct implementation path for entities first listed in the Italian NIS perimeter during 2026: significant…
ACN NIS 2026 Platform Rules and New Deadlines: Master Overview
ACN's April 2026 package sets new NIS deadlines for subjects listed for the first time in 2026 (incident notification from 1 January 2027, baseline m…
NIS 2 Executive Board Reporting: How to Turn Audit Outputs into Governance Decisions
Practical executive reporting model for NIS 2 audit outcomes with minimum KPI set, traffic-light escalation, and evidence-based closure visibility fo…
Prioritizing NIS 2 Audit Findings: From Gap List to Remediation Execution
Severity-to-execution model for NIS 2 audit findings with dependency-aware sequencing, triage criteria, and evidence-based closure tracking for remed…
Recurring NIS 2 Documentation Patterns and Quick Wins for Baseline Readiness
High-frequency recurring patterns in NIS 2 documentation and a quick-win framework for fast remediation of governance structure, evidence traceabilit…
UNI/PdR 174:2025 for NIS Organizations Certified to ISO 27001: What It Changes Operationally
ACN published UNI/PdR 174:2025 as an operational bridge between ISO/IEC 27001 and NIST CSF 2.0 for NIS-scoped organizations. It helps ISO-certified e…
NIS 2026 Reminder: 8 Days Left Before the 28 February Registration Deadline
Organizations in scope of Italy's NIS regime have until 28 February 2026 to complete annual registration via the ACN Services Portal. Both new and pr…
ACN Adopts Incident Taxonomy Under Law 90/2024: What Obligated Entities Must Do Now
ACN adopted the incident taxonomy under Law 90/2024 via the Determina of 9 February 2026. Obligated entities must now report incidents within 24 hour…
SECURE First Open Call 2026: What mSMEs Need to Submit Before 29 March 2026
The SECURE First Open Call (28 Jan - 29 Mar 2026) offers up to EUR 30,000 per project at 50% co-financing to help mSMEs achieve Cyber Resilience Act …
NIS 2 Incident Management Documentation Review: Method, Gaps, and Remediation Priorities
Practical review model for NIS 2 incident-management documentation covering process integrity, notification readiness, role accountability, and crisi…
NIS 2 Compliance Documentation Audit: Interview and Evidence Collection Workflow
Structured interview and evidence collection workflow for NIS 2 documentation audits, with a 6-domain model, evidence maturity scale, and gap-to-reme…
Cross-Document Coherence in NIS 2 Documentation: Audit Method and Controls
Five-dimension coherence audit model for NIS 2 documentation sets covering terminology, roles, cross-references, review cycles, and incident flow con…
NIS 2 point of contact and CSIRT contact: designation, duties and deadlines
ACN Determination 127437/2026 sets four roles for NIS entities: point of contact, substitute, CSIRT contact and optional substitutes of the CSIRT con…
NIS 2 Documentation Audit Checklist: Operational Method for Baseline Readiness
Five-block operational checklist for NIS 2 documentary audit covering requirement mapping, evidence maturity, cross-document consistency, and governa…
NIS 2 Supply-Chain Security: Managing Critical Suppliers and High-Impact Procurements
NIS 2 supply-chain security is a governance obligation covering supplier identification, risk assessment, contractual integration, and lifecycle moni…
NIS 2 Evidence Matrix and Board-Approval Readiness: Practical Audit Method
Practical method for building an NIS 2 evidence matrix with maturity scoring and board-approval readiness checks for baseline compliance audit.
NIS 2 Requirement-to-Document Mapping: Building a Defensible Audit Structure
Practical method for mapping NIS 2 baseline requirements to primary documents, supporting evidence, and governance controls to build a defensible aud…
NIS 2 Compliance Documentation Audit: How the Scoring Methodology Works
Aegister’s scoring methodology evaluates NIS 2 documents at requirement-point level across 5 dimensions on a 0-4 scale. This guide covers the scoring…
NIS 2 Documentary Evidence and Audit Readiness: How to Structure Compliance Proof
ACN baseline guidance requires documentary evidence as a core compliance element. Practical guide to evidence families, obligation-to-evidence mappin…
NIS 2 Significant Incident IS-3: Violation of Expected Service Levels
IS-3 in the ACN baseline model covers service-level violation incidents affecting entity services and activities. Practical guide to qualification, s…