{"id":13652,"date":"2026-07-27T15:48:29","date_gmt":"2026-07-27T13:48:29","guid":{"rendered":"https:\/\/orsingher.com\/industries-technology-acn-releases-new-faqs-on-nis2-obligations\/"},"modified":"2026-07-27T15:48:45","modified_gmt":"2026-07-27T13:48:45","slug":"industries-technology-acn-releases-new-faqs-on-nis2-obligations","status":"publish","type":"post","link":"https:\/\/orsingher.com\/en\/industries-technology-acn-releases-new-faqs-on-nis2-obligations\/","title":{"rendered":"INDUSTRIES, TECHNOLOGY | ACN releases new FAQs on NIS2 obligations"},"content":{"rendered":"<p>On\u00a014\u00a0July\u00a02026, the\u00a0Italian Cybersecurity Authority\u00a0(<em>ACN<\/em>)\u00a0announced\u00a0the release\u00a0new updates to the FAQs on NIS2\u00a0obligations applicable to the management bodies of essential and important entities\u00a0under\u00a0<a href=\"https:\/\/www.normattiva.it\/uri-res\/N2Ls?urn:nir:stato:decreto.legislativo:2024-09-04;138\" target=\"_blank\" rel=\"noopener\">Article 23 of Legislative Decree No. 138\/2024<\/a>\u00a0(the <strong><em>NIS 2 Decree<\/em><\/strong>)\u00a0implementing the NIS2 Directive. The FAQs represent an important interpretative tool, providing practical guidance on the governance obligations introduced by the NIS2 framework.<\/p>\n<p>In particular, ACN\u00a0updated FAQs ODA.8 and ODA.9, clarifying the extent to which management bodies may delegate the performance of their duties under Art.\u00a023\u00a0of NIS2 Decree.\u00a0ACN\u00a0confirms that operational activities may be delegated, while the management body retains overall responsibility for the actions of its delegates. The approval of the cybersecurity measures required under the NIS2 framework, however, remains a non-delegable responsibility of the management body acting collectively.<\/p>\n<p>ACN also introduced new FAQs ODA.10, ODA.11 and ODA.12. FAQ ODA.10 clarifies that the documents requiring approval by the management body\u00a0(identified in the relevant ACN\u00a0<a href=\"https:\/\/www.acn.gov.it\/portale\/documents\/d\/guest\/guida-alla-lettura-specifiche-di-base\" target=\"_blank\" rel=\"noopener\">guidelines<\/a>)\u00a0need\u00a0to\u00a0contain the information necessary for the management body to exercise its management, strategic planning and oversight functions. Those documents may subsequently be supplemented by delegates with additional technical and operational details.<\/p>\n<p>Finally, FAQs ODA.11 and ODA.12 specify that these supplementary technical documents, and any subsequent updates to them, do not require approval by the management body. ACN also confirms that entities remain free to\u00a0organise\u00a0their internal documentation system in the manner they consider most effective.<\/p>\n<p>Newsletter n. 120 &#8211; July 2026<\/p>\n","protected":false},"excerpt":{"rendered":"<p>On\u00a014\u00a0July\u00a02026, the\u00a0Italian Cybersecurity Authority\u00a0(ACN)\u00a0announced\u00a0the release\u00a0new updates to the FAQs on NIS2\u00a0obligations applicable to the management bodies of essential and important entities\u00a0under\u00a0Article 23 of Legislative Decree No. 138\/2024\u00a0(the NIS 2 Decree)\u00a0implementing the NIS2 Directive. The FAQs represent an important interpretative tool, providing practical guidance on the governance obligations introduced by the NIS2 framework. In particular, ACN\u00a0updated [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":"","_members_access_role":[],"_members_access_error":""},"categories":[65],"tags":[],"class_list":["post-13652","post","type-post","status-publish","format-standard","hentry","category-newsletters-en-2"],"acf":[],"_links":{"self":[{"href":"https:\/\/orsingher.com\/en\/wp-json\/wp\/v2\/posts\/13652","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/orsingher.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/orsingher.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/orsingher.com\/en\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/orsingher.com\/en\/wp-json\/wp\/v2\/comments?post=13652"}],"version-history":[{"count":1,"href":"https:\/\/orsingher.com\/en\/wp-json\/wp\/v2\/posts\/13652\/revisions"}],"predecessor-version":[{"id":13653,"href":"https:\/\/orsingher.com\/en\/wp-json\/wp\/v2\/posts\/13652\/revisions\/13653"}],"wp:attachment":[{"href":"https:\/\/orsingher.com\/en\/wp-json\/wp\/v2\/media?parent=13652"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/orsingher.com\/en\/wp-json\/wp\/v2\/categories?post=13652"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/orsingher.com\/en\/wp-json\/wp\/v2\/tags?post=13652"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}