ACN
Italy's National Cybersecurity Agency: determinations, the NIS platform, activity categorisation and the communications Italian organisations must follow.
All articles
UNI/PdR 174:2025 for NIS Organizations Certified to ISO 27001: What It Changes Operationally
ACN published UNI/PdR 174:2025 as an operational bridge between ISO/IEC 27001 and NIST CSF 2.0 for NIS-scoped organizations. It helps ISO-certified e…
NIS 2026 Reminder: 8 Days Left Before the 28 February Registration Deadline
Organizations in scope of Italy's NIS regime have until 28 February 2026 to complete annual registration via the ACN Services Portal. Both new and pr…
ACN Adopts Incident Taxonomy Under Law 90/2024: What Obligated Entities Must Do Now
ACN adopted the incident taxonomy under Law 90/2024 via the Determina of 9 February 2026. Obligated entities must now report incidents within 24 hour…
SECURE First Open Call 2026: What mSMEs Need to Submit Before 29 March 2026
The SECURE First Open Call (28 Jan - 29 Mar 2026) offers up to EUR 30,000 per project at 50% co-financing to help mSMEs achieve Cyber Resilience Act …
NIS 2 Incident Management Documentation Review: Method, Gaps, and Remediation Priorities
Practical review model for NIS 2 incident-management documentation covering process integrity, notification readiness, role accountability, and crisi…
NIS 2 Compliance Documentation Audit: Interview and Evidence Collection Workflow
Structured interview and evidence collection workflow for NIS 2 documentation audits, with a 6-domain model, evidence maturity scale, and gap-to-reme…
Cross-Document Coherence in NIS 2 Documentation: Audit Method and Controls
Five-dimension coherence audit model for NIS 2 documentation sets covering terminology, roles, cross-references, review cycles, and incident flow con…
NIS 2 point of contact and CSIRT contact: designation, duties and deadlines
ACN Determination 127437/2026 sets four roles for NIS entities: point of contact, substitute, CSIRT contact and optional substitutes of the CSIRT con…
NIS 2 Documentation Audit Checklist: Operational Method for Baseline Readiness
Five-block operational checklist for NIS 2 documentary audit covering requirement mapping, evidence maturity, cross-document consistency, and governa…
NIS 2 Supply-Chain Security: Managing Critical Suppliers and High-Impact Procurements
NIS 2 supply-chain security is a governance obligation covering supplier identification, risk assessment, contractual integration, and lifecycle moni…
NIS 2 Evidence Matrix and Board-Approval Readiness: Practical Audit Method
Practical method for building an NIS 2 evidence matrix with maturity scoring and board-approval readiness checks for baseline compliance audit.
NIS 2 Requirement-to-Document Mapping: Building a Defensible Audit Structure
Practical method for mapping NIS 2 baseline requirements to primary documents, supporting evidence, and governance controls to build a defensible aud…
NIS 2 Compliance Documentation Audit: How the Scoring Methodology Works
Aegister’s scoring methodology evaluates NIS 2 documents at requirement-point level across 5 dimensions on a 0-4 scale. This guide covers the scoring…
NIS 2 Documentary Evidence and Audit Readiness: How to Structure Compliance Proof
ACN baseline guidance requires documentary evidence as a core compliance element. Practical guide to evidence families, obligation-to-evidence mappin…
NIS 2 Significant Incident IS-3: Violation of Expected Service Levels
IS-3 in the ACN baseline model covers service-level violation incidents affecting entity services and activities. Practical guide to qualification, s…
Compliance Documentation Audit for NIS 2 Baseline Obligations: Method Overview
A Compliance Documentation Audit maps NIS 2 documents to baseline requirements, scores maturity on a 0-4 scale, verifies evidence traceability, and c…
NIS 2 Significant Incident IS-2: Integrity Loss Affecting Digital Data
IS-2 in the ACN baseline model covers integrity loss affecting digital data under entity ownership or control. Practical guide to qualification, evid…
NIS 2 baseline deadline October 2026: 8-month implementation roadmap
With the NIS 2 baseline adoption deadline set for October 2026, organizations have roughly 8 months left. This guide provides a compressed, phased ro…
NIS 2 KPIs and continuous improvement: operational metrics for resilient compliance
ACN guidance frames improvement as a continuous phase across the full incident lifecycle. This guide provides a practical KPI framework, governance r…
NIS 2 Significant Incident IS-1: Confidentiality Loss Affecting Digital Data
IS-1 in the ACN baseline model covers confidentiality loss affecting digital data under entity ownership or control. Practical guide to qualification…