--- title: "ACN: guides and insights, page 4" description: "Italy's National Cybersecurity Agency: determinations, the NIS platform, activity categorisation and the communications Italian organisations… Page 4." canonical: https://www.aegister.com/en/cms/keyword/acn/page/4/ url: /en/cms/keyword/acn/page/4/ lang: en --- ![](https://www.aegister.com/static/images/header-news.webp) # ACN Italy's National Cybersecurity Agency: determinations, the NIS platform, activity categorisation and the communications Italian organisations must follow. ## All articles January 30, 2026 ### [NIS 2 Governance Controls (GV): Policies, Roles, and Accountability Model](https://www.aegister.com/en/cms/insights/nis2-governance-gv-policies-roles-accountability/) The NIS 2 Governance (GV) domain defines cybersecurity direction, accountability, and oversight. Practical guide to implementing GV controls: context… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +8 January 30, 2026 ### [NIS 2 risk treatment plan: practical guide for ID.RA-06 approval](https://www.aegister.com/en/cms/insights/nis2-risk-treatment-plan-id-ra-06/) The risk treatment plan is mandatory under NIS 2 Appendix C (ID.RA-06). This guide covers what an approvable plan must show, a practical structure wi… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Governance](https://www.aegister.com/en/cms/keyword/governance/) +8 January 29, 2026 ### [NIS 2 Article 25 in Practice: Incident Notification Obligations and Operating Timeline](https://www.aegister.com/en/cms/insights/nis2-article-25-incident-notification/) Article 25 of Italy's NIS decree requires notification of significant incidents to CSIRT Italia. Practical guide to the 24h/72h notification timeline… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Incident notification](https://www.aegister.com/en/cms/keyword/incident-notification/) +7 January 29, 2026 ### [NIS 2 risk assessment document for systems and networks: practical guide for ID.RA-05 approval](https://www.aegister.com/en/cms/insights/nis2-risk-assessment-document-id-ra-05/) The risk assessment of information and network systems is mandatory under NIS 2 Appendix C (ID.RA-05). This guide covers what an approvable assessmen… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Governance](https://www.aegister.com/en/cms/keyword/governance/) +8 January 28, 2026 ### [NIS 2 cybersecurity organization document: how to structure it for GV.RR-02 approval](https://www.aegister.com/en/cms/insights/nis2-cybersecurity-organization-document-gv-rr-02/) The cybersecurity organization document is mandatory under NIS 2 Appendix C (GV.RR-02). This guide covers what it must prove, a practical template st… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Governance](https://www.aegister.com/en/cms/keyword/governance/) +7 January 28, 2026 ### [NIS 2 Article 24 in Practice: How to Implement Cybersecurity Risk-Management Measures](https://www.aegister.com/en/cms/insights/nis2-article-24-risk-management-measures/) Article 24 of Italy's NIS decree requires proportionate cybersecurity measures. Practical guide to implementing control families (GV/ID/PR/DE/RS/RC) … [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +7 January 27, 2026 ### [NIS 2 Article 23 in Practice: Obligations for Management and Governing Bodies](https://www.aegister.com/en/cms/insights/nis2-article-23-governance-obligations/) Article 23 of Italy's NIS decree requires governing bodies to formalize cybersecurity governance, approve policies, oversee implementation, and maint… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Governance](https://www.aegister.com/en/cms/keyword/governance/) +7 January 27, 2026 ### [NIS 2 cybersecurity policies document: practical guide for GV.PO-01 approval](https://www.aegister.com/en/cms/insights/nis2-cybersecurity-policies-document-gv-po-01/) Cybersecurity policies are mandatory under NIS 2 Appendix C (GV.PO-01). This guide covers what an approvable policy package must include, a modular t… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Governance](https://www.aegister.com/en/cms/keyword/governance/) +7 January 26, 2026 ### [NIS 2 operational templates for GRC teams: what to prepare and why it matters](https://www.aegister.com/en/cms/insights/nis2-operational-templates-grc-teams/) NIS baseline guidance identifies a concrete documentation set required for governance approval. This guide maps the Appendix C template set, explains… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Incident notification](https://www.aegister.com/en/cms/keyword/incident-notification/) +10 January 26, 2026 ### [NIS 2 mandatory documents master guide: what must be approved by the board and what to prepare now](https://www.aegister.com/en/cms/insights/nis2-mandatory-documents-master-guide-board-approval/) Appendix C lists 11 documents requiring board-level approval under NIS 2 baseline obligations. With incident notification already live and baseline m… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +8 January 24, 2026 ### [NIS 2 baseline obligations in practice: master overview for governance, controls, and incident operations](https://www.aegister.com/en/cms/insights/nis2-baseline-obligations-master-overview/) A structured operational overview of Italy’s NIS 2 baseline obligations: governance (Art. 23), risk management (Art. 24), and incident notification (… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +7 January 23, 2026 ### [NIS 2 essential and important entities: who they are and what changes](https://www.aegister.com/en/cms/insights/nis2-essential-vs-important-entities-baseline-differences/) Who is an essential and who an important entity under articles 3 and 6 of D.Lgs. 138/2024: Annex I and II sectors, the cases regardless of size, how … [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +7 January 22, 2026 ### [NIS 2 Legal Architecture and Role Model in Italy: Who Is Accountable for What](https://www.aegister.com/en/cms/insights/nis2-legal-architecture-role-model-italy/) Italy's NIS 2 legal architecture explained: Legislative Decree 138/2024, ACN baseline acts, and the three-layer accountability model for governance, … [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Governance](https://www.aegister.com/en/cms/keyword/governance/) +6 May 29, 2025 ### [Cybersecurity Update - Week 22 of 2025](https://www.aegister.com/en/cms/insights/cybersecurity-update-week-22-of-2025/) Aegister's weekly cybersecurity update for Week 22 of 2025, covering major threats, trends, regulatory changes (NIS 2, DORA), GRC topics, and interna… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Incident notification](https://www.aegister.com/en/cms/keyword/incident-notification/) +15 May 27, 2025 ### [NIS 2 Italy 2025 Deadline Extension: What Changed and Lessons for 2026](https://www.aegister.com/en/cms/insights/nis2-extension-companies-july-2025/) ACN extends the NIS 2 compliance deadline to July 31, 2025, for organizations that have requested support, providing additional time for data updates… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Security monitoring](https://www.aegister.com/en/cms/keyword/security-monitoring/) +5 May 26, 2025 ### [NIS 2 baseline security measures: ACN's 37 and 43 measures and deadlines](https://www.aegister.com/en/cms/insights/nis2-basic-measures-acn/) ACN Determination 379907/2025 sets the NIS 2 baseline security measures: 37 for important entities and 43 for essential ones, organised into six func… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +7 May 22, 2025 ### [Cyber Threats in Italy - ACN Operational Summary, April 2025](https://www.aegister.com/en/cms/insights/cyber-threats-italy-april-2025-summary/) The ACN's April 2025 Operational Summary highlights a rise in ransomware and DDoS attacks in Italy, with key sectors like telecoms and public adminis… [ACN](https://www.aegister.com/en/cms/keyword/acn/) [CSIRT](https://www.aegister.com/en/cms/keyword/csirt/) [Cyber threats](https://www.aegister.com/en/cms/keyword/cyber-threats/) +5 May 14, 2025 ### [NIS 2 in Italy: Obligations and Compliance Path for Organizations](https://www.aegister.com/en/cms/insights/nis2-obligations-italian-organizations-2025/) The NIS 2 Directive imposes new responsibilities on Italian organizations classified as essential or important entities. Here is the information to c… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) ACN platform +5 April 12, 2025 ### [Cyber Threats 2025: The Most Common Attacks and How to Defend Against Them](https://www.aegister.com/en/cms/insights/cyber-threats-2025-common-attacks/) An in-depth look at the most common cyber threats in 2025 from ransomware to supply chain attacks and how organizations can defend themselves using s… [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Risk management](https://www.aegister.com/en/cms/keyword/risk-management/) [Cyber threats](https://www.aegister.com/en/cms/keyword/cyber-threats/) +6 January 31, 2025 ### [Cybersecurity Monthly Report - January 2025 (Italy, EU, Global)](https://www.aegister.com/en/cms/insights/cybersecurity-monthly-report-january-2025/) Aegister's January 2025 monthly cybersecurity report: DORA goes live, NIS 2 registration milestones, key vulnerabilities (VPN/edge), ransomware polic… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Incident notification](https://www.aegister.com/en/cms/keyword/incident-notification/) +18