ACN
Italy's National Cybersecurity Agency: determinations, the NIS platform, activity categorisation and the communications Italian organisations must follow.
All articles
ACN supervision under NIS 2: inspections, orders and fines
For entities placed on the NIS list in April 2025, ACN gives October 2026 as the deadline for the baseline measures. How ACN supervises after that: m…
ECCC NCC Network Funding 2027: How National Coordination Centres Support Cyber Ecosystems
The NCC topic funds the operating capacity of National Coordination Centres and their communities, including financial support to third parties. Who …
NIS Reinforced Security Measures: ACN Opens the Consultation
On 18 September 2026 ACN opened a sector consultation on reinforced NIS security measures, meant to supplement and replace the baseline measures. The…
NIS Supply Chain Security: What ACN's FAQs MSB.13 to MSB.19 Clarify
On 24 July 2026 ACN published seven FAQs on NIS supply chain security. The four-phase process, the five minimum criteria for supply risk, why not eve…
Digital Europe Cybersecurity Call 2027: €96 Million Across Seven ECCC Topics
The ECCC opened a €96 million Digital Europe call across seven cybersecurity topics, with a single-stage deadline of 14 January 2027 at 17:00 CET. Ho…
ACN NIS Vademecum 2026: Compliance Calendar and Operational Checklist
ACN's NIS Vademecum 1.0 (September 2026) puts the NIS obligations on one calendar: six obligation families, three recurring annual windows and differ…
NIS Entity List Update: Late Registrations, Reviews and the 2027 Window
On 18 September 2026 ACN announced an update of the NIS entity list after more than 2,000 late registrations and about 2,000 reviews, and confirmed t…
Cybersecurity in Italy 2026: Regulations, Threats, Market and Practical Posture
Cybersecurity in Italy in 2026 is shaped by NIS 2 implementation, DORA, CRA, AI Act, ACN guidance, rising incident pressure and a growing security ma…
NIS 2 vs GDPR: Key Differences and Overlap for Italian Organizations
Comparison guide for Italian organizations: how NIS 2 and GDPR differ, where they overlap, and how to coordinate incident notification when personal …
NIS Activity and Service Categorization: ACN Publishes the 2026 Model
On 24 April 2026, ACN published Determination 155238 with the categorization model for NIS activities and services. The 2026 platform window runs fro…
NIS Representative in Italy: When It Is Needed and How the Designation Works
The Italy-based NIS representative is a specific cross-border compliance mechanism for legal persons with no EU establishment that perform the inhere…
ACN NIS Platform: Activity and Service Categorization
Articles 20 and 21 of ACN Determinazione 127437/2026 define the procedural side of activity and service categorization on the NIS platform: window 1 …
ACN NIS Platform: Relevant Suppliers and What Organizations Must Submit
The ACN platform requires NIS subjects to submit a filtered list of 'relevant NIS suppliers' during the annual update window (15 April-31 May) - not …
ACN NIS Platform: Registration, Annual Update, and Continuous Update
The ACN NIS platform operates a recurring compliance cycle: registration (1 January-28 February), annual update (15 April-31 May), and continuous upd…
ACN NIS Platform Roles, Access, and User Association
The ACN platform determination defines a governed role model for NIS compliance: point of contact, substitute, CSIRT contact, segreteria, and operato…
New NIS Subjects in 2026: Incident-Notification and Baseline-Measure Deadlines
The ACN 2026 timing determination sets a distinct implementation path for entities first listed in the Italian NIS perimeter during 2026: significant…
ACN NIS 2026 Platform Rules and New Deadlines: Master Overview
ACN's April 2026 package sets new NIS deadlines for subjects listed for the first time in 2026 (incident notification from 1 January 2027, baseline m…
NIS 2 Executive Board Reporting: How to Turn Audit Outputs into Governance Decisions
Practical executive reporting model for NIS 2 audit outcomes with minimum KPI set, traffic-light escalation, and evidence-based closure visibility fo…
Prioritizing NIS 2 Audit Findings: From Gap List to Remediation Execution
Severity-to-execution model for NIS 2 audit findings with dependency-aware sequencing, triage criteria, and evidence-based closure tracking for remed…
Recurring NIS 2 Documentation Patterns and Quick Wins for Baseline Readiness
High-frequency recurring patterns in NIS 2 documentation and a quick-win framework for fast remediation of governance structure, evidence traceabilit…