The NIS2 Directive (EU Directive 2022/2555), transposed into Italian law by Legislative Decree 138/2024, introduces stringent obligations for organizations classified as essential or important entities. These entities must communicate a set of information through the digital platform of the National Cybersecurity Agency (ACN) and keep it up to date. For a comprehensive understanding of NIS2 requirements, refer to our detailed guide.
Communication Obligations
Organizations must provide the following information:
- Security Officers: Personal and contact details of responsible individuals, including legal representatives and/or authorized agents.
- Contact Point and Deputy: Designation of the NIS contact point and their deputy, with respective roles and updated contact information.
- Digital Infrastructure: List of public IP addresses and domains used by the organization.
- EU Presence: List of EU Member States where the organization provides services within the Directive's scope.
- Governing Bodies: Composition of administrative and management bodies.
- Information Sharing Agreements: Details of active information-sharing agreements.
It is crucial to keep this information up to date; any changes must be communicated within 14 days.
Consequences of Non-Compliance
Failure to comply with these obligations can result in significant penalties:
- Essential Entities: Up to €10 million or 2% of the annual global turnover.
- Important Entities: Up to €7 million or 1.4% of the annual global turnover.
- Executives: Potential personal sanctions, including disqualification.
It is imperative that organizations act promptly to ensure compliance.
Support from Aegister
Aegister offers specialized support to guide organizations through NIS2 compliance, including:
- Consulting to identify specific obligations.
- Assistance in collecting and submitting required information.
- Staff training on new regulatory requirements.
- Support in managing communications with ACN.
For more information and to schedule a tailored consultation, contact us.
