Guides

Cybersecurity Audit: What It Is, How It Works, and How to Prepare

A cybersecurity audit checks whether security governance, controls, evidence and technical practices are suitable for the chosen framework. This guid…

Cybersecurity Frameworks Compared: NIST CSF, ISO 27001, NIS 2, ACN Baseline

NIST CSF, ISO/IEC 27001, NIS 2 and the ACN baseline solve different problems. This comparison explains which are voluntary, mandatory, certifiable, o…

EU AI Act: Cybersecurity Implications for Compliance Teams

Focused guide to the cybersecurity implications of the EU AI Act for compliance teams, including staged application dates, high-risk AI controls, and…

Wazuh vs Commercial SIEM: A Decision Framework for Italian SMEs

A decision framework for Italian SMEs comparing Wazuh, commercial SIEM platforms, and managed service models for NIS 2 detection and evidence needs.

Cyber Resilience Act (CRA): Obligations for Software and Hardware Manufacturers

Explainer on the Cyber Resilience Act for software and hardware manufacturers: scope, application dates, reporting, vulnerability handling, conformit…

Centralized Log Management with Wazuh: Meeting NIS 2 Detection Requirements

Compliance mapping guide for centralized logging with Wazuh under NIS 2. Includes minimum log sources, retention, integrity, alerting, reporting, and…

NIS 2 vs GDPR: Key Differences and Overlap for Italian Organizations

Comparison guide for Italian organizations: how NIS 2 and GDPR differ, where they overlap, and how to coordinate incident notification when personal …

How to Install Wazuh: Step-by-Step Deployment Guide for NIS 2

Technical guide to deploy Wazuh for a NIS 2 readiness program, with official-documentation links, command examples, architecture choices, hardening s…

NIS Activity and Service Categorization: ACN Publishes the 2026 Model

On 24 April 2026, ACN published Determination 155238 with the categorization model for NIS activities and services. The 2026 platform window runs fro…

Wazuh: The Open-Source SIEM for NIS 2 Compliance

A practical introduction to Wazuh as an open-source SIEM and XDR platform for NIS 2 programs. Covers architecture, detection value, limits, TCO, and …

Italian Cyber Security Perimeter (PSNC): Scope, Obligations, and NIS 2 Coordination

Guide to the Italian National Cyber Security Perimeter: scope, main obligations, incident notification, security measures, ICT supply controls, and c…

What Is a SIEM: Definition, Architecture, and Role in NIS 2 Compliance

A SIEM centralizes security logs, correlates events, generates alerts and supports investigations. For NIS 2 and ACN baseline work, it is not just a …

NIS Representative in Italy: When It Is Needed and How the Designation Works

The Italy-based NIS representative is a specific cross-border compliance mechanism for legal persons with no EU establishment that perform the inhere…

ACN NIS Platform: Activity and Service Categorization

Articles 20 and 21 of ACN Determinazione 127437/2026 define the procedural side of activity and service categorization on the NIS platform: window 1 …

ACN NIS Platform: Relevant Suppliers and What Organizations Must Submit

The ACN platform requires NIS subjects to submit a filtered list of 'relevant NIS suppliers' during the annual update window (15 April-31 May) — not …

ACN NIS Platform: Registration, Annual Update, and Continuous Update

The ACN NIS platform operates a recurring compliance cycle: registration (1 January-28 February), annual update (15 April-31 May), and continuous upd…

ACN NIS Platform Roles, Access, and User Association

The ACN platform determination defines a governed role model for NIS compliance: point of contact, substitute, CSIRT contact, segreteria, and operato…

NIS2 Executive Board Reporting: How to Turn Audit Outputs into Governance Decisions

Practical executive reporting model for NIS2 audit outcomes with minimum KPI set, traffic-light escalation, and evidence-based closure visibility for…

Prioritizing NIS2 Audit Findings: From Gap List to Remediation Execution

Severity-to-execution model for NIS2 audit findings with dependency-aware sequencing, triage criteria, and evidence-based closure tracking for remedi…

Recurring NIS2 Documentation Patterns and Quick Wins for Baseline Readiness

High-frequency recurring patterns in NIS2 documentation and a quick-win framework for fast remediation of governance structure, evidence traceability…