Guides
All articles
ACN NIS Platform Roles, Access, and User Association
The ACN platform determination defines a governed role model for NIS compliance: point of contact, substitute, CSIRT contact, segreteria, and operato…
NIS 2 Executive Board Reporting: How to Turn Audit Outputs into Governance Decisions
Practical executive reporting model for NIS 2 audit outcomes with minimum KPI set, traffic-light escalation, and evidence-based closure visibility fo…
Prioritizing NIS 2 Audit Findings: From Gap List to Remediation Execution
Severity-to-execution model for NIS 2 audit findings with dependency-aware sequencing, triage criteria, and evidence-based closure tracking for remed…
Recurring NIS 2 Documentation Patterns and Quick Wins for Baseline Readiness
High-frequency recurring patterns in NIS 2 documentation and a quick-win framework for fast remediation of governance structure, evidence traceabilit…
UNI/PdR 174:2025 for NIS Organizations Certified to ISO 27001: What It Changes Operationally
ACN published UNI/PdR 174:2025 as an operational bridge between ISO/IEC 27001 and NIST CSF 2.0 for NIS-scoped organizations. It helps ISO-certified e…
SECURE First Open Call 2026: What mSMEs Need to Submit Before 29 March 2026
The SECURE First Open Call (28 Jan - 29 Mar 2026) offers up to EUR 30,000 per project at 50% co-financing to help mSMEs achieve Cyber Resilience Act …
NIS 2 Incident Management Documentation Review: Method, Gaps, and Remediation Priorities
Practical review model for NIS 2 incident-management documentation covering process integrity, notification readiness, role accountability, and crisi…
NIS 2 Compliance Documentation Audit: Interview and Evidence Collection Workflow
Structured interview and evidence collection workflow for NIS 2 documentation audits, with a 6-domain model, evidence maturity scale, and gap-to-reme…
Cross-Document Coherence in NIS 2 Documentation: Audit Method and Controls
Five-dimension coherence audit model for NIS 2 documentation sets covering terminology, roles, cross-references, review cycles, and incident flow con…
NIS 2 point of contact and CSIRT contact: designation, duties and deadlines
ACN Determination 127437/2026 sets four roles for NIS entities: point of contact, substitute, CSIRT contact and optional substitutes of the CSIRT con…
NIS 2 Documentation Audit Checklist: Operational Method for Baseline Readiness
Five-block operational checklist for NIS 2 documentary audit covering requirement mapping, evidence maturity, cross-document consistency, and governa…
NIS 2 Supply-Chain Security: Managing Critical Suppliers and High-Impact Procurements
NIS 2 supply-chain security is a governance obligation covering supplier identification, risk assessment, contractual integration, and lifecycle moni…
NIS 2 Evidence Matrix and Board-Approval Readiness: Practical Audit Method
Practical method for building an NIS 2 evidence matrix with maturity scoring and board-approval readiness checks for baseline compliance audit.
NIS 2 Requirement-to-Document Mapping: Building a Defensible Audit Structure
Practical method for mapping NIS 2 baseline requirements to primary documents, supporting evidence, and governance controls to build a defensible aud…
NIS 2 Compliance Documentation Audit: How the Scoring Methodology Works
Aegister’s scoring methodology evaluates NIS 2 documents at requirement-point level across 5 dimensions on a 0-4 scale. This guide covers the scoring…
NIS 2 Documentary Evidence and Audit Readiness: How to Structure Compliance Proof
ACN baseline guidance requires documentary evidence as a core compliance element. Practical guide to evidence families, obligation-to-evidence mappin…
NIS 2 Significant Incident IS-3: Violation of Expected Service Levels
IS-3 in the ACN baseline model covers service-level violation incidents affecting entity services and activities. Practical guide to qualification, s…
NIS 2 Significant Incident IS-2: Integrity Loss Affecting Digital Data
IS-2 in the ACN baseline model covers integrity loss affecting digital data under entity ownership or control. Practical guide to qualification, evid…
NIS 2 baseline deadline October 2026: 8-month implementation roadmap
With the NIS 2 baseline adoption deadline set for October 2026, organizations have roughly 8 months left. This guide provides a compressed, phased ro…
NIS 2 KPIs and continuous improvement: operational metrics for resilient compliance
ACN guidance frames improvement as a continuous phase across the full incident lifecycle. This guide provides a practical KPI framework, governance r…