--- title: "NIS 2: guides and insights, page 3" description: "Practical guides to the NIS 2 Directive and Legislative Decree 138/2024: who is in scope, which obligations apply to essential and important… Page 3." canonical: https://www.aegister.com/en/cms/keyword/nis-2/page/3/ url: /en/cms/keyword/nis-2/page/3/ lang: en --- ![](https://www.aegister.com/static/images/header-news.webp) # NIS 2 Practical guides to the NIS 2 Directive and Legislative Decree 138/2024: who is in scope, which obligations apply to essential and important entities, and how to organise documents, measures and deadlines. ## All articles February 14, 2026 ### [NIS 2 Documentary Evidence and Audit Readiness: How to Structure Compliance Proof](https://www.aegister.com/en/cms/insights/nis2-documentary-evidence-audit-readiness/) ACN baseline guidance requires documentary evidence as a core compliance element. Practical guide to evidence families, obligation-to-evidence mappin… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +9 February 13, 2026 ### [NIS 2 Significant Incident IS-3: Violation of Expected Service Levels](https://www.aegister.com/en/cms/insights/nis2-significant-incident-is-3-service-level-violation/) IS-3 in the ACN baseline model covers service-level violation incidents affecting entity services and activities. Practical guide to qualification, s… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +9 February 13, 2026 ### [Compliance Documentation Audit for NIS 2 Baseline Obligations: Method Overview](https://www.aegister.com/en/cms/insights/compliance-documentation-audit-nis2-method-overview/) A Compliance Documentation Audit maps NIS 2 documents to baseline requirements, scores maturity on a 0-4 scale, verifies evidence traceability, and c… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +6 February 12, 2026 ### [NIS 2 Significant Incident IS-2: Integrity Loss Affecting Digital Data](https://www.aegister.com/en/cms/insights/nis2-significant-incident-is-2-integrity-loss/) IS-2 in the ACN baseline model covers integrity loss affecting digital data under entity ownership or control. Practical guide to qualification, evid… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +8 February 12, 2026 ### [NIS 2 baseline deadline October 2026: 8-month implementation roadmap](https://www.aegister.com/en/cms/insights/nis2-baseline-deadline-october-2026-implementation-roadmap/) With the NIS 2 baseline adoption deadline set for October 2026, organizations have roughly 8 months left. This guide provides a compressed, phased ro… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +6 February 11, 2026 ### [NIS 2 KPIs and continuous improvement: operational metrics for resilient compliance](https://www.aegister.com/en/cms/insights/nis2-kpis-continuous-improvement/) ACN guidance frames improvement as a continuous phase across the full incident lifecycle. This guide provides a practical KPI framework, governance r… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +8 February 11, 2026 ### [NIS 2 Significant Incident IS-1: Confidentiality Loss Affecting Digital Data](https://www.aegister.com/en/cms/insights/nis2-significant-incident-is-1-confidentiality-loss/) IS-1 in the ACN baseline model covers confidentiality loss affecting digital data under entity ownership or control. Practical guide to qualification… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +8 February 11, 2026 ### [Common NIS 2 compliance mistakes: practical gaps that delay baseline readiness](https://www.aegister.com/en/cms/insights/nis2-common-compliance-mistakes/) Most NIS 2 delays are operational: missing evidence, unclear ownership, untested notification workflows, and late governance decisions. A practical g… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +6 February 10, 2026 ### [NIS 2 Incident Typology Model: Condition, Compromise, and Affected Object](https://www.aegister.com/en/cms/insights/nis2-incident-typology-model/) ACN baseline guidance classifies significant incidents through condition, compromise, and object of compromise. Practical guide to using the typology… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +8 February 10, 2026 ### [NIS 2 operational registers for logs, backups, and recovery: practical guide to auditable evidence](https://www.aegister.com/en/cms/insights/nis2-operational-registers-logs-backups-recovery/) NIS 2 baseline requires operational evidence beyond policies. This guide covers how to build auditable registers for logs, backups, restore tests, an… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +9 February 09, 2026 ### [NIS 2 incident-notification obligations are live: operating model after the 9-month deadline](https://www.aegister.com/en/cms/insights/nis2-incident-notification-live-operating-model/) The NIS 2 9-month incident-notification deadline passed in January 2026. This guide provides the post-deadline operating model: governance confirmati… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [CSIRT](https://www.aegister.com/en/cms/keyword/csirt/) +6 February 09, 2026 ### [NIS 2 incident management and CSIRT notification plan: practical guide for an approvable RS.MA-01 document](https://www.aegister.com/en/cms/insights/nis2-incident-management-csirt-notification-plan-rs-ma-01/) The incident management plan is mandatory under NIS 2 Appendix C (RS.MA-01). This guide covers what an approvable plan must include, a practical temp… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Incident notification](https://www.aegister.com/en/cms/keyword/incident-notification/) +10 February 07, 2026 ### [NIS 2 Recovery Controls (RC): Operational Resilience and Service Restoration](https://www.aegister.com/en/cms/insights/nis2-recovery-rc-operational-resilience/) The NIS 2 Recovery (RC) domain defines how entities restore operations after incidents and sustain resilience. Practical guide to restoration procedu… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +10 February 06, 2026 ### [NIS 2 crisis management plan: practical guide for an approvable ID.IM-04 document](https://www.aegister.com/en/cms/insights/nis2-crisis-management-plan-id-im-04/) The crisis management plan is mandatory under NIS 2 Appendix C (ID.IM-04). This guide covers what an approvable plan must contain, a practical templa… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +10 February 06, 2026 ### [NIS 2 Response Controls (RS): Containment and Eradication in Incident Handling](https://www.aegister.com/en/cms/insights/nis2-response-rs-containment-eradication/) Containment and eradication are iterative response steps that limit damage and remove attacker persistence. Practical guide to strategy selection, ev… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +10 February 06, 2026 ### [NIS 2 disaster recovery plan: practical guide for an approvable ID.IM-04 document](https://www.aegister.com/en/cms/insights/nis2-disaster-recovery-plan-id-im-04/) The disaster recovery plan is mandatory under NIS 2 Appendix C (ID.IM-04). This guide covers what an approvable DR plan must contain, a practical tem… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +10 February 05, 2026 ### [NIS 2 Response Controls (RS): Signaling and Investigation Operating Model](https://www.aegister.com/en/cms/insights/nis2-response-rs-signaling-investigation/) The NIS 2 Response (RS) domain requires structured incident response through signaling, investigation, and iterative decision loops. Practical guide … [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +11 February 05, 2026 ### [NIS 2 business continuity plan: practical guide to build an approvable ID.IM-04 document](https://www.aegister.com/en/cms/insights/nis2-business-continuity-plan-id-im-04/) The business continuity plan is mandatory under NIS 2 Appendix C (ID.IM-04). This guide covers what an approvable plan must include, a practical temp… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +9 February 05, 2026 ### [EU Cybersecurity Act Revision - COM(2026) 11: What Changes and Why It Matters](https://www.aegister.com/en/cms/insights/eu-cybersecurity-act-revision-2026/) The European Commission's January 2026 proposal to revise the EU Cybersecurity Act: supply-chain risk governance, simplified certification (ECCF), EN… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [Supply chain](https://www.aegister.com/en/cms/keyword/supply-chain/) [ISO 27001](https://www.aegister.com/en/cms/keyword/iso-27001/) +10 February 04, 2026 ### [NIS 2 vulnerability management plan: practical guide for ID.RA-08 approval](https://www.aegister.com/en/cms/insights/nis2-vulnerability-management-plan-id-ra-08/) The vulnerability management plan is mandatory under NIS 2 Appendix C (ID.RA-08). This guide covers what an approvable plan must show, a practical st… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Governance](https://www.aegister.com/en/cms/keyword/governance/) +8