NIS 2 compliance in Italy

By 31 December 2025, essential and important entities must notify ACN of their designated CSIRT contact point (i.e., the Computer Security Incident Response Team established within ACN).

Download our insights from the link available below on this page for further details on this deadline, as well as an operational overview of the main obligations, responsibilities, and sanctioning regime introduced by the NIS2 Decree for management bodies.