Directive (EU) 2022\/2555, commonly known as NIS2, marks a decisive turning point in the European cybersecurity landscape, imposing new and more stringent obligations on a wide range of organisations, with a particular focus on large companies.<\/p>\n\n\n\n
Adopted in Italy through Legislative Decree No. 138 of 4 September 2024, the legislation aims to drastically raise the level of collective digital resilience in the face of increasingly sophisticated and pervasive cyber threats.<\/p>\n\n\n\n
Italy has designated the National Cybersecurity Agency (ACN) as the hub of the surveillance system and the primary point of contact, supported by specific ministerial competencies for certain sectors. It is imperative for every company to accurately identify the relevant authority for its operational scope.<\/p>\n\n\n\n
A crucial appointment awaits the \u201cessential\u201d and \u201cimportant\u201d individuals: by 31 May 2025<\/strong>, it is mandatory to communicate updated information to the ACN via the dedicated digital platform.<\/p>\n\n\n\n Among these, the identifying data of the legal representatives and management bodies stand out, the designation of a contact point substitute, the list of public IP addresses and domain names used, as well as any cross-border operations and confirmation of the entity's registration details, including the details of the members of the administrative bodies.<\/p>\n\n\n\n Failure to comply with these requirements, or with other provisions of NIS2, exposes companies to a particularly severe penalty regime.<\/p>\n\n\n\n For entities defined as \u201cessential\u201d, financial penalties can reach \u20ac10 million or 2% of annual worldwide turnover. For \u201cimportant\u201d entities, the limit is set at \u20ac7 million or 1.4% of global turnover.<\/p>\n\n\n\n Sanctionable infringements include the failure to adopt adequate cyber risk management measures, the failure to notify security incidents promptly or at all, and non-compliance with reporting obligations, such as the 31 May deadline.<\/p>\n\n\n\n Added to these are possible ancillary sanctions, such as the suspension of certifications or a temporary ban for senior figures from exercising managerial functions.<\/p>\n\n\n\n Navigating the complexity of the NIS2 Directive requires a strategic and proactive approach. Businesses are called upon to consolidate their internal cybersecurity governance, with the direct and conscious involvement of senior management.<\/p>\n\n\n\n It is also crucial to conduct periodic risk assessments and implement technical, operational, and organisational security measures commensurate with the threats. Supply chain security, the preparation of incident response plans, and the maintenance of accurate documentation complete the framework of essential actions.<\/p>\n\n\n\n Morelli Bolzoni Law Firm offers specialist consultancy and qualified assistance to companies to successfully navigate all phases of NIS2 Directive compliance, from initial impact assessments to the implementation of required measures and ongoing compliance management.<\/p>\n\n\n\n Contact us for targeted support and to transform a regulatory obligation into an opportunity to strengthen your digital resilience.<\/p>","protected":false},"excerpt":{"rendered":" La Direttiva (UE) 2022\/2555, meglio nota come NIS2, segna una svolta decisiva nel panorama della cybersicurezza europea, imponendo nuovi e pi\u00f9 stringenti obblighi per un vasto numero di organizzazioni, con un focus particolare sulle grandi imprese. Recepita in Italia attraverso il Decreto Legislativo n. 138 del 4 settembre 2024, la normativa mira a innalzare drasticamente […]<\/p>\n","protected":false},"author":1,"featured_media":46,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-45","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-corporate-governance-e-compliance"],"acf":[],"_links":{"self":[{"href":"https:\/\/morellibolzoni.it\/en\/wp-json\/wp\/v2\/posts\/45","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/morellibolzoni.it\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/morellibolzoni.it\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/morellibolzoni.it\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/morellibolzoni.it\/en\/wp-json\/wp\/v2\/comments?post=45"}],"version-history":[{"count":1,"href":"https:\/\/morellibolzoni.it\/en\/wp-json\/wp\/v2\/posts\/45\/revisions"}],"predecessor-version":[{"id":47,"href":"https:\/\/morellibolzoni.it\/en\/wp-json\/wp\/v2\/posts\/45\/revisions\/47"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/morellibolzoni.it\/en\/wp-json\/wp\/v2\/media\/46"}],"wp:attachment":[{"href":"https:\/\/morellibolzoni.it\/en\/wp-json\/wp\/v2\/media?parent=45"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/morellibolzoni.it\/en\/wp-json\/wp\/v2\/categories?post=45"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/morellibolzoni.it\/en\/wp-json\/wp\/v2\/tags?post=45"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}