Training, exams and certification
Sixty-eight requirements that check an Italian essential or important entity against Legislative Decree 138/2024 and the basic security measures of the National Cybersecurity Agency (ACN).
Reviewed by GoToCertify’s Subject Matter Expert ·
Nine areas: scope, registration and relations with the ACN; management bodies; governance; supply chain; identify; protect; detect; incident response and notification; supervision and sanctions. Each requirement is mapped to the ISO/IEC 27001:2022 controls, so the work done for an ISMS can be reused.
The legal basis is Legislative Decree 4 September 2024, n. 138, which transposes NIS2 into Italian law, and ACN determination 379907/2025 on basic security measures and significant incidents, applicable from 15 January 2026. The assessment distinguishes the 37 measures for important entities from the 43 for essential entities.
Deadlines tracked: basic security measures within 18 months of the listing notice, incident notification within 9 months of it, and for significant incidents a pre-notification within 24 hours, a notification within 72 hours and a final report within one month.
Nothing is sent to our servers: the answers stay in the browser, and you can download a save file to resume later or share with colleagues. The content is in Italian because it follows Italian legislation; it takes 45 to 90 minutes.
Free and paid: the questionnaire, the dashboard with your overall and per-area score and a summary PDF are free, with no account. Unlocking this assessment (€18 excluding VAT, 45 days of access, no subscription) adds compliance guidance on every requirement, the detailed dashboard, the full action plan, draft documents in Word, the full PDF report with your logo, the evidence tracker, comparison with a previous baseline and the Excel export. GoToCertify Pro (€39 excluding VAT, 45 days) unlocks every assessment and adds the cross-framework view. The access link arrives by email after payment through Stripe.
CISOs, compliance officers, management bodies and advisers of Italian entities in scope of NIS2. It complements the EU-level NIS2 self-assessment, written in English on the Directive itself, and is part of the GoToCertify Compliance Self-Assessment Hub.
No. It is written in Italian because it tracks Italian legislation and ACN determinations. The EU edition of the NIS2 assessment is in English.
Yes. The questionnaire, the dashboard with overall and per-area scores and the summary PDF are free. Unlocking the assessment (18 euro) or GoToCertify Pro (39 euro, every assessment) adds guidance, the full action plan, Word drafts, the full report and the Excel export.
No. It is a readiness check that shows where the gaps are and what to do first.
Free, no registration, summary PDF included. In Italian.
Start the NIS2 Italy self-assessmentBITIL.COM is an ATO (Accredited Training Organization) and an AEO (Approved Examination Organization) of PeopleCert. PRINCE2® and PRINCE2 Agile® are registered trade marks of PeopleCert.