NIS 2
Practical guides to the NIS 2 Directive and Legislative Decree 138/2024: who is in scope, which obligations apply to essential and important entities, and how to organise documents, measures and deadlines.
All articles
NIS 2 amendments: what the Commission proposes
There is no NIS 3. On 20 January 2026 the Commission proposed targeted amendments to NIS 2 (COM(2026) 13): a small mid-cap category that would make m…
ACN supervision under NIS 2: inspections, orders and fines
For entities placed on the NIS list in April 2025, ACN gives October 2026 as the deadline for the baseline measures. How ACN supervises after that: m…
NIS 2 assessment: a self-assessment checklist for SMEs
Your company has just found out it falls under NIS 2. A self-assessment to run before an ACN review or an external audit: confirm scope, find the mea…
NIS 2 vs ISO 27001: what certification covers and the gaps
Your company holds or plans ISO/IEC 27001 and falls under NIS 2. What the certification already covers, the obligations D.Lgs. 138/2024 adds (registr…
ECCC Regional Cable Hubs 2027: Funding for Cross-Border Undersea Cable Security
The REGCABH topic funds Regional Cable Hubs that pool maritime, cyber and operator data to detect threats to undersea cables. The mandatory authority…
Cyber Console 2.0: redesigned from top to bottom
Cyber Console reaches version 2.0: an interface redesigned from top to bottom, one search for the whole console, video guides to using the console an…
ECCC COORDPREP 2027: Funding for Coordinated Cyber Preparedness Testing
The COORDPREP topic funds coordinated preparedness testing and wider preparedness services, led by designated public cybersecurity bodies with privat…
ECCC EULEG Funding 2027: From Cybersecurity Law to Shared Capability
The EULEG topic funds shared capacity to implement EU cybersecurity law, from NIS 2 reporting to CRA testing and certification. What it pays for, wha…
NIS Reinforced Security Measures: ACN Opens the Consultation
On 18 September 2026 ACN opened a sector consultation on reinforced NIS security measures, meant to supplement and replace the baseline measures. The…
NIS Supply Chain Security: What ACN's FAQs MSB.13 to MSB.19 Clarify
On 24 July 2026 ACN published seven FAQs on NIS supply chain security. The four-phase process, the five minimum criteria for supply risk, why not eve…
ACN NIS Vademecum 2026: Compliance Calendar and Operational Checklist
ACN's NIS Vademecum 1.0 (September 2026) puts the NIS obligations on one calendar: six obligation families, three recurring annual windows and differ…
NIS Entity List Update: Late Registrations, Reviews and the 2027 Window
On 18 September 2026 ACN announced an update of the NIS entity list after more than 2,000 late registrations and about 2,000 reviews, and confirmed t…
EU AI Act: Cybersecurity Implications for Compliance Teams
Focused guide to the cybersecurity implications of the EU AI Act for compliance teams, including staged application dates, high-risk AI controls, and…
NIS 2 vs GDPR: Key Differences and Overlap for Italian Organizations
Comparison guide for Italian organizations: how NIS 2 and GDPR differ, where they overlap, and how to coordinate incident notification when personal …
NIS Activity and Service Categorization: ACN Publishes the 2026 Model
On 24 April 2026, ACN published Determination 155238 with the categorization model for NIS activities and services. The 2026 platform window runs fro…
Wazuh: The Open-Source SIEM for NIS 2 Compliance
A practical introduction to Wazuh as an open-source SIEM and XDR platform for NIS 2 programs. Covers architecture, detection value, limits, TCO, and …
Italian Cyber Security Perimeter (PSNC): Scope, Obligations, and NIS 2 Coordination
Guide to the Italian National Cyber Security Perimeter: scope, main obligations, incident notification, security measures, ICT supply controls, and c…
What Is a SIEM: Definition, Architecture, and Role in NIS 2 Compliance
A SIEM centralizes security logs, correlates events, generates alerts and supports investigations. For NIS 2 and ACN baseline work, it is not just a …
NIS Representative in Italy: When It Is Needed and How the Designation Works
The Italy-based NIS representative is a specific cross-border compliance mechanism for legal persons with no EU establishment that perform the inhere…
ACN NIS Platform: Activity and Service Categorization
Articles 20 and 21 of ACN Determinazione 127437/2026 define the procedural side of activity and service categorization on the NIS platform: window 1 …