GoToCertify AcademyCertificationsAGILEPM®AgilePM® Foundation — 2-day course (APMG)AgilePM® Practitioner — 2-day course (APMG)Compare AgilePM® certificationsDESIGN THINKINGDTMethod® Foundation — 2-day course (APMG)Compare Design Thinking certificationsDEVOPSDevOps FoundationDevOps LeaderSRE FoundationSRE PractitionerDevSecOps FoundationDevSecOps PractitionerAIOps FoundationObservability FoundationContinuous Testing FoundationVSM FoundationCompare DevOps certificationsISO 31000ISO 31000 Foundation — Exam Bundle (PECB)Risk Manager — Exam Bundle (PECB)Compare ISO 31000 certificationsISO/IEC 20000ISO/IEC 20000 Foundation — 2-day course (APMG)ISO/IEC 20000 Auditor — 2-day course (APMG)ISO/IEC 20000 Practitioner — 2-day course (APMG)Compare ISO/IEC 20000 certificationsISO/IEC 27001ISO/IEC 27001 Foundation — 2-day course (APMG)ISO/IEC 27001 Auditor — 2-day course (APMG)ISO/IEC 27001 Practitioner — 2-day course (APMG)Lead Implementer — Exam Bundle (PECB)Lead Auditor — Exam Bundle (PECB)Compare ISO/IEC 27001 certificationsISO/IEC 27005ISO/IEC 27005 Foundation — Exam Bundle (PECB)Risk Manager — Exam Bundle (PECB)Lead Risk Manager — Exam Bundle (PECB)Compare ISO/IEC 27005 certificationsISO/IEC 42001ISO/IEC 42001 Foundation — Exam Bundle (PECB)Lead Implementer — Exam Bundle (PECB)Lead Auditor — Exam Bundle (PECB)Compare ISO/IEC 42001 certificationsITIL® v5ITIL Foundation (Version 5)ITIL Foundation Bridge (Version 5)ITIL AI Governance (Version 5)ITIL Product (Version 5)ITIL Service (Version 5)ITIL Experience (Version 5)ITIL Strategy (Version 5)ITIL Transformation (Version 5)ITIL Managing Professional Transition (Version 5)Compare ITIL® v5 packagesLEAN SIX SIGMAYellow Belt (IASSC)Green Belt (IASSC)Black Belt (IASSC)Compare Lean Six Sigma certificationsM_o_R® 4M_o_R® 4 PractitionerMSP® 5MSP® 5 FoundationMSP® 5 PractitionerCompare MSP® 5 packagesPM²PM² Foundation — 2-day course (APMG)Compare PM² certificationsPRINCE2® 7PRINCE2® 7 FoundationPRINCE2® 7 PractitionerCompare PRINCE2® 7 packagesSCRUMScrum Essentials — 1-day course (APMG)Scrum Product Owner — 2-day course (APMG)Scrum Master — 2-day course (APMG)Compare Scrum certificationsTOGAFExam Simulator for TOGAF® EA FoundationExam Simulator for TOGAF® EA PractitionerTOGAF® EA Foundation — 2-day courseTOGAF® EA Practitioner — 2-day courseAll certificationsExam GuidesAGILEPM®Foundation (APMG)Practitioner (APMG)DESIGN THINKINGDTMethod Foundation (APMG)DEVOPSThe DevOps Foundation exam formatThe DevOps Leader exam formatThe SRE Foundation exam formatThe SRE Practitioner exam formatThe DevSecOps Foundation exam formatThe DevSecOps Practitioner exam formatThe AIOps Foundation exam formatThe Observability Foundation exam formatThe Continuous Testing Foundation exam formatThe VSM Foundation exam formatISO 31000Foundation (PECB)Risk Manager (PECB)ISO/IEC 20000Foundation (APMG)Auditor (APMG)Practitioner (APMG)ISO/IEC 27001Foundation (APMG)Auditor (APMG)Practitioner (APMG)Lead Auditor (PECB)Lead Implementer (PECB)ISO/IEC 27005Foundation (PECB)Risk Manager (PECB)Lead Risk Manager (PECB)ISO/IEC 42001Foundation (PECB)Lead Auditor (PECB)Lead Implementer (PECB)ITIL® v5The ITIL® v5 Foundation exam formatThe ITIL® v5 Foundation Bridge exam formatThe ITIL® v5 Service exam formatThe ITIL® v5 Product exam formatThe ITIL® v5 Experience exam formatThe ITIL® v5 Strategy exam formatThe ITIL® v5 Transformation exam formatThe ITIL® v5 AI Governance exam formatThe ITIL® v5 Managing Professional Transition exam formatITIL® 4 or ITIL® 5?The ITIL® v5 certification pathWhat ITIL® v5 certification costsLEAN SIX SIGMAYellow Belt (IASSC)Green Belt (IASSC)Black Belt (IASSC)M_o_R® 4The M_o_R® 4 Practitioner exam formatMSP® 5The MSP® 5 Foundation exam formatThe MSP® 5 Practitioner exam formatPM²Foundation (APMG)PRINCE2The PRINCE2 7 Foundation exam formatThe PRINCE2 7 Practitioner exam formatPRINCE2 Agile FoundationPRINCE2 Agile PractitionerWhat PRINCE2® 7 certification costsSCRUMEssentials (APMG)Product Owner (APMG)Scrum Master (APMG)TOGAFThe OGEA-101 exam formatThe OGEA-102 exam formatFoundation or Practitioner?The TOGAF 10 certification pathWhat certification costs Log inCreate account
← All news
News · Italy

NIS2 Italy edition: self-assessment on Legislative Decree 138/2024 and the ACN basic security measures

Sixty-eight requirements that check an Italian essential or important entity against Legislative Decree 138/2024 and the basic security measures of the National Cybersecurity Agency (ACN).

Reviewed by GoToCertify’s Subject Matter Expert ·

68Requirements
9Areas
ITLanguage

What it covers

Nine areas: scope, registration and relations with the ACN; management bodies; governance; supply chain; identify; protect; detect; incident response and notification; supervision and sanctions. Each requirement is mapped to the ISO/IEC 27001:2022 controls, so the work done for an ISMS can be reused.

The legal basis is Legislative Decree 4 September 2024, n. 138, which transposes NIS2 into Italian law, and ACN determination 379907/2025 on basic security measures and significant incidents, applicable from 15 January 2026. The assessment distinguishes the 37 measures for important entities from the 43 for essential entities.

Deadlines tracked: basic security measures within 18 months of the listing notice, incident notification within 9 months of it, and for significant incidents a pre-notification within 24 hours, a notification within 72 hours and a final report within one month.

How it works

  • Profile: entity type and sector, with yes/no questions that exclude the requirements that do not apply.
  • Assessment: each requirement is scored on a maturity scale from 0 (not started) to 4 (fully compliant), with space for evidence, owner and target date.
  • Dashboard: overall and per-area compliance percentages for everyone; once the assessment is unlocked, the detail by legal source and by control group, plus P1/P2 priority gaps.
  • PDF report: a summary report for everyone; once the assessment is unlocked, the full report with the prioritised action plan.

Nothing is sent to our servers: the answers stay in the browser, and you can download a save file to resume later or share with colleagues. The content is in Italian because it follows Italian legislation; it takes 45 to 90 minutes.

Free and paid: the questionnaire, the dashboard with your overall and per-area score and a summary PDF are free, with no account. Unlocking this assessment (€18 excluding VAT, 45 days of access, no subscription) adds compliance guidance on every requirement, the detailed dashboard, the full action plan, draft documents in Word, the full PDF report with your logo, the evidence tracker, comparison with a previous baseline and the Excel export. GoToCertify Pro (€39 excluding VAT, 45 days) unlocks every assessment and adds the cross-framework view. The access link arrives by email after payment through Stripe.

Who it is for

CISOs, compliance officers, management bodies and advisers of Italian entities in scope of NIS2. It complements the EU-level NIS2 self-assessment, written in English on the Directive itself, and is part of the GoToCertify Compliance Self-Assessment Hub.

Questions people ask

Is the content in English?

No. It is written in Italian because it tracks Italian legislation and ACN determinations. The EU edition of the NIS2 assessment is in English.

Is it free?

Yes. The questionnaire, the dashboard with overall and per-area scores and the summary PDF are free. Unlocking the assessment (18 euro) or GoToCertify Pro (39 euro, every assessment) adds guidance, the full action plan, Word drafts, the full report and the Excel export.

Does it replace a legal opinion?

No. It is a readiness check that shows where the gaps are and what to do first.

Check your NIS2 readiness in Italy

Free, no registration, summary PDF included. In Italian.

Start the NIS2 Italy self-assessment
PeopleCert Accredited Training Organization and Approved Examination Organization

BITIL.COM is an ATO (Accredited Training Organization) and an AEO (Approved Examination Organization) of PeopleCert. PRINCE2® and PRINCE2 Agile® are registered trade marks of PeopleCert.

PrivacyTermsAboutVerify a GoToCertify certificate