Certified reliability: ISO/IEC 27001:2022 – Cert. no. IT347116 (Bureau Veritas). Find out more

Our Services

NIS2 consulting for companies and suppliers

Technical and organisational support to comply with NIS2 and respond to customers' security requests

cybersecurity aziendale protezione dei dati prevenzione attacchi informatici gestione delle vulnerabilità

NIS2 consulting

What NIS2 is and who it applies to

The European NIS2 Directive was transposed in Italy by Legislative Decree 138/2024. It generally applies to medium-sized and large companies carrying out specific activities identified by the decree, in sectors such as energy, transport, healthcare, water, digital infrastructure, managed ICT services for other businesses, postal services, waste management, chemicals, food, manufacturing and digital services. Some entities are covered regardless of size; otherwise, size must be assessed under the decree's criteria, taking into account headcount, financial data and links with other companies.

Entities are classed as essential or important, with proportionate measures and different supervisory regimes. Suppliers that are not directly in scope may also receive security requests, questionnaires and contractual requirements from their customers.

NIS2 consulting

What NIS2 requires of in-scope companies

When the obligations start depends on the year in which the entity is added to the list of NIS entities notified by ACN.

Security measures

Adopt the baseline security measures set by the National Cybersecurity Agency (ACN): 37 for important entities and 43 for essential ones, broken down into technical and organisational requirements, from risk management to supplier security.

Incident reporting

As a rule, without undue delay: early warning to CSIRT Italia within 24 hours and notification within 72 hours of becoming aware of a significant incident, and a final report within one month of the notification.

Management accountability

Management and executive bodies approve how the measures are implemented, oversee their application, attend cybersecurity training and promote regular training for staff. They are accountable for breaches under the decree.

NIS2 consulting

Why choose IT Global Consulting for NIS2

Our information security management system is certified to ISO/IEC 27001:2022: every day we apply to ourselves many of the measures NIS2 requires, from risk management to supplier management.

Based in Milan and working throughout Italy since 2012, we combine consulting with technical skills in networks, systems, cloud and data centres, with professionals who can also support your team on an outsourced basis.

NIS2 consulting services

We support you with the technical and organisational work of compliance, from the initial review to training, using the same method we apply to our own certified management system.

For companies subject to NIS2

Review against ACN measures and action plan

We compare existing measures, procedures and documents with the baseline security measures required by ACN, identify what is missing and set priorities to complete it.

Implementing technical measures

We design and carry out work on networks, systems, cloud and data centres: multi-factor authentication, backups, network segmentation, log collection, vulnerability and patch management, an up-to-date list of systems, devices and software.

Preparing for incident management and reporting

Together with your contact person, we define procedures, roles and timelines to handle an incident and prepare notifications to CSIRT Italia, and we test them with exercises.

Supplier security

We set up the supplier assessment process: classification, questionnaires, technical security requirements to include in contracts and periodic reviews.

Outsourced professionals

Security specialists, security architects and project managers who work alongside your team on compliance programmes.

Training and awareness

Cybersecurity training for staff and for senior management.

For suppliers to in-scope companies

Responding to customer requests

Technical support to answer security questionnaires and security clauses from customers subject to NIS2, with concrete evidence.

Path to ISO/IEC 27001

Identifying what is missing, documenting the management system and preparing for the certification audit: a path we have been through ourselves.

Each company assesses whether it is subject to NIS2, with the help of its own legal advisers if needed. Our support covers the technical and organisational aspects.

Let's talk about your project

Request information

Do you have questions about our services? We're here to help!

Our team of experts is ready to listen to your needs and to offer you solutions tailored to your business.

Fill out the contact form. We will get back to you as soon as possible to discuss how we can support you in the transformation of your IT infrastructure.

Thank you! Your request has been received!

Oops! An error occurred while submitting the form.

Partners