--- title: "NIS 2: guides and insights" description: "Practical guides to the NIS 2 Directive and Legislative Decree 138/2024: who is in scope, which obligations apply to essential and important entities…" canonical: https://www.aegister.com/en/cms/keyword/nis-2/ url: /en/cms/keyword/nis-2/ lang: en --- ![](https://www.aegister.com/static/images/header-news.webp) # NIS 2 Practical guides to the NIS 2 Directive and Legislative Decree 138/2024: who is in scope, which obligations apply to essential and important entities, and how to organise documents, measures and deadlines. ## All articles October 13, 2026 ### [NIS 2 amendments: what the Commission proposes](https://www.aegister.com/en/cms/insights/nis2-targeted-amendments-proposal-2026/) There is no NIS 3. On 20 January 2026 the Commission proposed targeted amendments to NIS 2 (COM(2026) 13): a small mid-cap category that would make m… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [Incident notification](https://www.aegister.com/en/cms/keyword/incident-notification/) Cybersecurity Act +7 October 10, 2026 ### [ACN supervision under NIS 2: inspections, orders and fines](https://www.aegister.com/en/cms/insights/acn-nis2-supervision-inspections-penalties/) For entities placed on the NIS list in April 2025, ACN gives October 2026 as the deadline for the baseline measures. How ACN supervises after that: m… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +7 October 09, 2026 ### [NIS 2 assessment: a self-assessment checklist for SMEs](https://www.aegister.com/en/cms/insights/nis2-assessment-self-assessment-checklist/) Your company has just found out it falls under NIS 2. A self-assessment to run before an ACN review or an external audit: confirm scope, find the mea… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [Governance](https://www.aegister.com/en/cms/keyword/governance/) +7 October 08, 2026 ### [NIS 2 vs ISO 27001: what certification covers and the gaps](https://www.aegister.com/en/cms/insights/nis2-vs-iso-27001-mapping-gaps/) Your company holds or plans ISO/IEC 27001 and falls under NIS 2. What the certification already covers, the obligations D.Lgs. 138/2024 adds (registr… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [Incident notification](https://www.aegister.com/en/cms/keyword/incident-notification/) +7 October 06, 2026 ### [ECCC Regional Cable Hubs 2027: Funding for Cross-Border Undersea Cable Security](https://www.aegister.com/en/cms/insights/eccc-regional-cable-hubs-2027-undersea-cable-security/) The REGCABH topic funds Regional Cable Hubs that pool maritime, cyber and operator data to detect threats to undersea cables. The mandatory authority… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) critical infrastructure DIGITAL-ECCC-2027 +6 October 05, 2026 ### [Cyber Console 2.0: redesigned from top to bottom](https://www.aegister.com/en/cms/insights/cyber-console-2-0/) Cyber Console reaches version 2.0: an interface redesigned from top to bottom, one search for the whole console, video guides to using the console an… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [Incident notification](https://www.aegister.com/en/cms/keyword/incident-notification/) [ISO 27001](https://www.aegister.com/en/cms/keyword/iso-27001/) +8 October 02, 2026 ### [ECCC COORDPREP 2027: Funding for Coordinated Cyber Preparedness Testing](https://www.aegister.com/en/cms/insights/eccc-coordprep-2027-cyber-preparedness-testing/) The COORDPREP topic funds coordinated preparedness testing and wider preparedness services, led by designated public cybersecurity bodies with privat… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [CSIRT](https://www.aegister.com/en/cms/keyword/csirt/) COORDPREP +6 September 30, 2026 ### [ECCC EULEG Funding 2027: From Cybersecurity Law to Shared Capability](https://www.aegister.com/en/cms/insights/eccc-euleg-2027-cybersecurity-legislation-funding/) The EULEG topic funds shared capacity to implement EU cybersecurity law, from NIS 2 reporting to CRA testing and certification. What it pays for, wha… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [DORA](https://www.aegister.com/en/cms/keyword/dora/) [Cyber Resilience Act](https://www.aegister.com/en/cms/keyword/cyber-resilience-act/) +6 September 27, 2026 ### [NIS Reinforced Security Measures: ACN Opens the Consultation](https://www.aegister.com/en/cms/insights/nis-reinforced-security-measures-acn-consultation/) On 18 September 2026 ACN opened a sector consultation on reinforced NIS security measures, meant to supplement and replace the baseline measures. The… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +5 September 27, 2026 ### [NIS Supply Chain Security: What ACN's FAQs MSB.13 to MSB.19 Clarify](https://www.aegister.com/en/cms/insights/acn-faq-nis-supply-chain-security-msb-13-19/) On 24 July 2026 ACN published seven FAQs on NIS supply chain security. The four-phase process, the five minimum criteria for supply risk, why not eve… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +6 September 27, 2026 ### [ACN NIS Vademecum 2026: Compliance Calendar and Operational Checklist](https://www.aegister.com/en/cms/insights/acn-nis-vademecum-2026-compliance-calendar/) ACN's NIS Vademecum 1.0 (September 2026) puts the NIS obligations on one calendar: six obligation families, three recurring annual windows and differ… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +7 September 27, 2026 ### [NIS Entity List Update: Late Registrations, Reviews and the 2027 Window](https://www.aegister.com/en/cms/insights/nis-2027-entity-list-reinforced-measures-registration/) On 18 September 2026 ACN announced an update of the NIS entity list after more than 2,000 late registrations and about 2,000 reviews, and confirmed t… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +6 April 28, 2026 ### [EU AI Act: Cybersecurity Implications for Compliance Teams](https://www.aegister.com/en/cms/insights/eu-ai-act-cybersecurity-implications/) Focused guide to the cybersecurity implications of the EU AI Act for compliance teams, including staged application dates, high-risk AI controls, and… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [Cyber Resilience Act](https://www.aegister.com/en/cms/keyword/cyber-resilience-act/) AI Act cybersecurity +8 April 23, 2026 ### [NIS 2 vs GDPR: Key Differences and Overlap for Italian Organizations](https://www.aegister.com/en/cms/insights/nis-2-vs-gdpr-comparison-italian-organizations/) Comparison guide for Italian organizations: how NIS 2 and GDPR differ, where they overlap, and how to coordinate incident notification when personal … [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Incident notification](https://www.aegister.com/en/cms/keyword/incident-notification/) +7 April 21, 2026 ### [NIS Activity and Service Categorization: ACN Publishes the 2026 Model](https://www.aegister.com/en/cms/insights/nis-activity-service-categorization-acn-2026-model/) On 24 April 2026, ACN published Determination 155238 with the categorization model for NIS activities and services. The 2026 platform window runs fro… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) Annex 1 +9 April 20, 2026 ### [Wazuh: The Open-Source SIEM for NIS 2 Compliance](https://www.aegister.com/en/cms/insights/wazuh-open-source-siem-nis-2-compliance/) A practical introduction to Wazuh as an open-source SIEM and XDR platform for NIS 2 programs. Covers architecture, detection value, limits, TCO, and … [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [Security monitoring](https://www.aegister.com/en/cms/keyword/security-monitoring/) ACN baseline measures +7 April 18, 2026 ### [Italian Cyber Security Perimeter (PSNC): Scope, Obligations, and NIS 2 Coordination](https://www.aegister.com/en/cms/insights/psnc-italian-cyber-security-perimeter/) Guide to the Italian National Cyber Security Perimeter: scope, main obligations, incident notification, security measures, ICT supply controls, and c… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) ACN perimeter critical infrastructure +8 April 17, 2026 ### [What Is a SIEM: Definition, Architecture, and Role in NIS 2 Compliance](https://www.aegister.com/en/cms/insights/what-is-a-siem-nis-2-compliance/) A SIEM centralizes security logs, correlates events, generates alerts and supports investigations. For NIS 2 and ACN baseline work, it is not just a … [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [Security monitoring](https://www.aegister.com/en/cms/keyword/security-monitoring/) ACN baseline measures +8 April 16, 2026 ### [NIS Representative in Italy: When It Is Needed and How the Designation Works](https://www.aegister.com/en/cms/insights/nis-representative-italy-designation-process/) The Italy-based NIS representative is a specific cross-border compliance mechanism for legal persons with no EU establishment that perform the inhere… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [Determinazione 127437/2026](https://www.aegister.com/en/cms/keyword/determinazione-1274372026/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +7 April 16, 2026 ### [ACN NIS Platform: Activity and Service Categorization](https://www.aegister.com/en/cms/insights/acn-nis-platform-activity-service-categorization/) Articles 20 and 21 of ACN Determinazione 127437/2026 define the procedural side of activity and service categorization on the NIS platform: window 1 … [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [Determinazione 127437/2026](https://www.aegister.com/en/cms/keyword/determinazione-1274372026/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +8