Cybersecurity

Aegister Obtains ISO 27001 and ISO 9001 Certifications

Aegister obtained two ISO certifications in April 2026: EN ISO/IEC 27001:2023 (I726) for information security and ISO 9001:2015 (Q5482) for quality m…

Aegister Obtains ISO 9001:2015 Certification

Aegister obtained ISO 9001:2015 certification (no. Q5482) from AUDISO on 2026-04-14, valid until 2029-04-13, for the development, production, and com…

New NIS Subjects in 2026: Incident-Notification and Baseline-Measure Deadlines

The ACN 2026 timing determination sets a distinct implementation path for entities first listed in the Italian NIS perimeter during 2026: significant…

ACN NIS 2026 Platform Rules and New Deadlines: Master Overview

ACN's April 2026 package sets new NIS deadlines for subjects listed for the first time in 2026 (incident notification from 1 January 2027, baseline m…

Aegister Obtains EN ISO/IEC 27001:2023 Certification

Aegister obtained EN ISO/IEC 27001:2023 certification (no. I726) from AUDISO on 2026-04-01, valid until 2029-03-31, for cybersecurity services and so…

UNI/PdR 174:2025 for NIS Organizations Certified to ISO 27001: What It Changes Operationally

ACN published UNI/PdR 174:2025 as an operational bridge between ISO/IEC 27001 and NIST CSF 2.0 for NIS-scoped organizations. It helps ISO-certified e…

NIS 2026 Reminder: 8 Days Left Before the 28 February Registration Deadline

Organizations in scope of Italy's NIS regime have until 28 February 2026 to complete annual registration via the ACN Services Portal. Both new and pr…

ACN Adopts Incident Taxonomy Under Law 90/2024: What Obligated Entities Must Do Now

ACN adopted the incident taxonomy under Law 90/2024 via the Determina of 9 February 2026. Obligated entities must now report incidents within 24 hour…

NIS2 Point of Contact and CSIRT Contact Role: Accountability and Operating Duties

NIS2 implementation guidance distinguishes the legal Point of Contact from the operational CSIRT contact role. Practical guide to role formalization,…

NIS2 Supply-Chain Security: Managing Critical Suppliers and High-Impact Procurements

NIS2 supply-chain security is a governance obligation covering supplier identification, risk assessment, contractual integration, and lifecycle monit…

NIS2 Documentary Evidence and Audit Readiness: How to Structure Compliance Proof

ACN baseline guidance requires documentary evidence as a core compliance element. Practical guide to evidence families, obligation-to-evidence mappin…

NIS2 Significant Incident IS-3: Violation of Expected Service Levels

IS-3 in the ACN baseline model covers service-level violation incidents affecting entity services and activities. Practical guide to qualification, s…

NIS2 Significant Incident IS-2: Integrity Loss Affecting Digital Data

IS-2 in the ACN baseline model covers integrity loss affecting digital data under entity ownership or control. Practical guide to qualification, evid…

NIS2 baseline deadline October 2026: 8-month implementation roadmap

With the NIS2 baseline adoption deadline set for October 2026, organizations have roughly 8 months left. This guide provides a compressed, phased roa…

NIS2 Significant Incident IS-1: Confidentiality Loss Affecting Digital Data

IS-1 in the ACN baseline model covers confidentiality loss affecting digital data under entity ownership or control. Practical guide to qualification…

NIS2 Incident Typology Model: Condition, Compromise, and Affected Object

ACN baseline guidance classifies significant incidents through condition, compromise, and object of compromise. Practical guide to using the typology…

NIS2 Recovery Controls (RC): Operational Resilience and Service Restoration

The NIS2 Recovery (RC) domain defines how entities restore operations after incidents and sustain resilience. Practical guide to restoration procedur…

NIS2 Response Controls (RS): Containment and Eradication in Incident Handling

Containment and eradication are iterative response steps that limit damage and remove attacker persistence. Practical guide to strategy selection, ev…

NIS2 Response Controls (RS): Signaling and Investigation Operating Model

The NIS2 Response (RS) domain requires structured incident response through signaling, investigation, and iterative decision loops. Practical guide t…

NIS2 Detection Controls (DE): Event Monitoring and Adversarial Signal Handling

The NIS2 Detection (DE) domain requires monitoring networks, services, and endpoints to identify adverse events early. Practical guide to log readine…