Deadlines, decisions by the authorities and EVIDEVO news. Each item shows its date and links to the official sources.
Entities included in the Italian NIS list in 2025 must adopt the baseline security measures defined by ACN by 31 October 2026, eighteen months after the inclusion notice.
Practical guides on NIS2, ISO/IEC 27001, DORA and GDPR with official sources, a glossary of compliance terms and answers to the most frequent questions.
Manufacturers of products with digital elements must report actively exploited vulnerabilities and severe incidents through ENISA's Single Reporting Platform, live from the same date.
2 August 2026 remains an application date for the Article 50 transparency obligations. The Digital Omnibus on AI moves high-risk obligations to 2 December 2027 (Annex III) and 2 August 2028 (Annex I).
The ACN determinations of 13 April 2026 set the deadlines for entities entering the NIS scope in 2026: CSIRT contact by 31 December 2026, incident reporting from 1 January 2027, baseline measures by 31 July 2027.
It starts from the frameworks in scope and how the work is organised today. In thirty minutes, EVIDEVO is shown working in that context.