--- title: "NIS 2: guides and insights, page 4" description: "Practical guides to the NIS 2 Directive and Legislative Decree 138/2024: who is in scope, which obligations apply to essential and important… Page 4." canonical: https://www.aegister.com/en/cms/keyword/nis-2/page/4/ url: /en/cms/keyword/nis-2/page/4/ lang: en --- ![](https://www.aegister.com/static/images/header-news.webp) # NIS 2 Practical guides to the NIS 2 Directive and Legislative Decree 138/2024: who is in scope, which obligations apply to essential and important entities, and how to organise documents, measures and deadlines. ## All articles February 04, 2026 ### [NIS 2 Detection Controls (DE): Event Monitoring and Adversarial Signal Handling](https://www.aegister.com/en/cms/insights/nis2-detection-de-event-monitoring/) The NIS 2 Detection (DE) domain requires monitoring networks, services, and endpoints to identify adverse events early. Practical guide to log readin… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +11 February 03, 2026 ### [NIS 2 training and cyber-competency register: practical guide to auditable workforce evidence](https://www.aegister.com/en/cms/insights/nis2-training-competency-register-workforce-evidence/) NIS 2 baseline requires operational evidence of training execution and competency development. This guide covers what a training register must contai… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) compliance +5 February 03, 2026 ### [NIS 2 Protection Controls (PR): Technical and Organizational Measures in Execution](https://www.aegister.com/en/cms/insights/nis2-protection-pr-technical-organizational-measures/) The NIS 2 Protection (PR) domain translates risk decisions into safeguards over identities, data, platforms, and infrastructure. Practical guide to P… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +10 February 03, 2026 ### [NIS 2 cybersecurity training plan: practical guide for an approvable PR.AT-01 document](https://www.aegister.com/en/cms/insights/nis2-cybersecurity-training-plan-pr-at-01/) The cybersecurity training plan is mandatory under NIS 2 Appendix C (PR.AT-01). This guide covers what an approvable plan must contain, a practical t… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Governance](https://www.aegister.com/en/cms/keyword/governance/) +8 February 02, 2026 ### [NIS 2 supplier register and supply-chain controls: practical guide for an auditable vendor inventory](https://www.aegister.com/en/cms/insights/nis2-supplier-register-supply-chain-controls/) NIS 2 baseline includes supply-chain security as a dedicated control area (GV.SC). This guide covers what a NIS 2-ready supplier register must contai… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Supply chain](https://www.aegister.com/en/cms/keyword/supply-chain/) +6 February 02, 2026 ### [NIS 2 inventory of relevant systems and assets: practical guide to build an auditable register](https://www.aegister.com/en/cms/insights/nis2-systems-assets-inventory-auditable-register/) NIS 2 baseline compliance requires auditable inventories of systems, assets, and network flows. This guide covers what a NIS 2-ready register must co… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +6 January 31, 2026 ### [NIS 2 Identification Controls (ID): Inventories, Risk Assessment, and Improvement Cycle](https://www.aegister.com/en/cms/insights/nis2-identification-id-inventories-risk-assessment/) The NIS 2 Identification (ID) domain covers asset visibility, risk assessment, treatment planning, vulnerability processes, and improvement cycles. P… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +9 January 31, 2026 ### [Cybersecurity Monthly Report - January 2026 (Italy, EU, Global)](https://www.aegister.com/en/cms/insights/cybersecurity-monthly-report-january-2026/) Aegister’s January 2026 monthly cybersecurity report: EU cybersecurity package with Cybersecurity Act revision and NIS 2 simplification amendments, D… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [Incident notification](https://www.aegister.com/en/cms/keyword/incident-notification/) [Governance](https://www.aegister.com/en/cms/keyword/governance/) +19 January 30, 2026 ### [NIS 2 remediation roadmap (Piano di Adeguamento): practical guide for ID.IM-01 approval](https://www.aegister.com/en/cms/insights/nis2-remediation-roadmap-id-im-01/) The remediation roadmap is mandatory under NIS 2 Appendix C (ID.IM-01). This guide covers how to consolidate gaps, prioritize actions, align mileston… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +9 January 30, 2026 ### [NIS 2 Governance Controls (GV): Policies, Roles, and Accountability Model](https://www.aegister.com/en/cms/insights/nis2-governance-gv-policies-roles-accountability/) The NIS 2 Governance (GV) domain defines cybersecurity direction, accountability, and oversight. Practical guide to implementing GV controls: context… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +8 January 30, 2026 ### [NIS 2 risk treatment plan: practical guide for ID.RA-06 approval](https://www.aegister.com/en/cms/insights/nis2-risk-treatment-plan-id-ra-06/) The risk treatment plan is mandatory under NIS 2 Appendix C (ID.RA-06). This guide covers what an approvable plan must show, a practical structure wi… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Governance](https://www.aegister.com/en/cms/keyword/governance/) +8 January 29, 2026 ### [NIS 2 Article 25 in Practice: Incident Notification Obligations and Operating Timeline](https://www.aegister.com/en/cms/insights/nis2-article-25-incident-notification/) Article 25 of Italy's NIS decree requires notification of significant incidents to CSIRT Italia. Practical guide to the 24h/72h notification timeline… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Incident notification](https://www.aegister.com/en/cms/keyword/incident-notification/) +7 January 29, 2026 ### [NIS 2 risk assessment document for systems and networks: practical guide for ID.RA-05 approval](https://www.aegister.com/en/cms/insights/nis2-risk-assessment-document-id-ra-05/) The risk assessment of information and network systems is mandatory under NIS 2 Appendix C (ID.RA-05). This guide covers what an approvable assessmen… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Governance](https://www.aegister.com/en/cms/keyword/governance/) +8 January 28, 2026 ### [NIS 2 cybersecurity organization document: how to structure it for GV.RR-02 approval](https://www.aegister.com/en/cms/insights/nis2-cybersecurity-organization-document-gv-rr-02/) The cybersecurity organization document is mandatory under NIS 2 Appendix C (GV.RR-02). This guide covers what it must prove, a practical template st… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Governance](https://www.aegister.com/en/cms/keyword/governance/) +7 January 28, 2026 ### [NIS 2 Article 24 in Practice: How to Implement Cybersecurity Risk-Management Measures](https://www.aegister.com/en/cms/insights/nis2-article-24-risk-management-measures/) Article 24 of Italy's NIS decree requires proportionate cybersecurity measures. Practical guide to implementing control families (GV/ID/PR/DE/RS/RC) … [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +7 January 27, 2026 ### [NIS 2 Article 23 in Practice: Obligations for Management and Governing Bodies](https://www.aegister.com/en/cms/insights/nis2-article-23-governance-obligations/) Article 23 of Italy's NIS decree requires governing bodies to formalize cybersecurity governance, approve policies, oversee implementation, and maint… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Governance](https://www.aegister.com/en/cms/keyword/governance/) +7 January 27, 2026 ### [NIS 2 cybersecurity policies document: practical guide for GV.PO-01 approval](https://www.aegister.com/en/cms/insights/nis2-cybersecurity-policies-document-gv-po-01/) Cybersecurity policies are mandatory under NIS 2 Appendix C (GV.PO-01). This guide covers what an approvable policy package must include, a modular t… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Governance](https://www.aegister.com/en/cms/keyword/governance/) +7 January 26, 2026 ### [NIS 2 operational templates for GRC teams: what to prepare and why it matters](https://www.aegister.com/en/cms/insights/nis2-operational-templates-grc-teams/) NIS baseline guidance identifies a concrete documentation set required for governance approval. This guide maps the Appendix C template set, explains… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) [Incident notification](https://www.aegister.com/en/cms/keyword/incident-notification/) +10 January 26, 2026 ### [NIS 2 mandatory documents master guide: what must be approved by the board and what to prepare now](https://www.aegister.com/en/cms/insights/nis2-mandatory-documents-master-guide-board-approval/) Appendix C lists 11 documents requiring board-level approval under NIS 2 baseline obligations. With incident notification already live and baseline m… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +8 January 24, 2026 ### [NIS 2 baseline obligations in practice: master overview for governance, controls, and incident operations](https://www.aegister.com/en/cms/insights/nis2-baseline-obligations-master-overview/) A structured operational overview of Italy’s NIS 2 baseline obligations: governance (Art. 23), risk management (Art. 24), and incident notification (… [NIS 2](https://www.aegister.com/en/cms/keyword/nis-2/) [NIS 2 baseline measures](https://www.aegister.com/en/cms/keyword/nis-2-baseline-measures/) [ACN](https://www.aegister.com/en/cms/keyword/acn/) +7