Incident notification

NIS 2 vs GDPR: Key Differences and Overlap for Italian Organizations

Comparison guide for Italian organizations: how NIS 2 and GDPR differ, where they overlap, and how to coordinate incident notification when personal …

New NIS Subjects in 2026: Incident-Notification and Baseline-Measure Deadlines

The ACN 2026 timing determination sets a distinct implementation path for entities first listed in the Italian NIS perimeter during 2026: significant…

ACN NIS 2026 Platform Rules and New Deadlines: Master Overview

ACN's April 2026 package sets new NIS deadlines for subjects listed for the first time in 2026 (incident notification from 1 January 2027, baseline m…

Common NIS2 compliance mistakes: practical gaps that delay baseline readiness

Most NIS2 delays are operational: missing evidence, unclear ownership, untested notification workflows, and late governance decisions. A practical gu…

NIS2 incident-notification obligations are live: operating model after the 9-month deadline

The NIS2 9-month incident-notification deadline passed in January 2026. This guide provides the post-deadline operating model: governance confirmatio…

NIS2 Article 25 in Practice: Incident Notification Obligations and Operating Timeline

Article 25 of Italy's NIS decree requires notification of significant incidents to CSIRT Italia. Practical guide to the 24h/72h notification timeline…

NIS2 baseline obligations in practice: master overview for governance, controls, and incident operations

A structured operational overview of Italy’s NIS2 baseline obligations: governance (Art. 23), risk management (Art. 24), and incident notification (A…