INDUSTRIES, TECHNOLOGY | CSIRT Contact Person to be nominated by 31 December 2025

On 3 October 2025, the National Cybersecurity Authority (ACN) published Determination No. 333017/2025 (Determination), updating and replacing the Determination No. 283727/2025 of 22 July 2025. The key change introduced by the Determination is the creation of the role of CSIRT Contact Person, responsible for liaising with the Computer Security Incident Response Team (CSIRT, i.e. the national technical body operating within the ACN with the function of preventing, analyzing and managing cyber incidents affecting strategic networks and infrastructure) and for reporting incidents as required by Articles 25 and 26 of the Legislative Decree No. 134/2024 implementing the Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union.  The CSIRT Contact Person must be a natural person designated by the Point of Contact between 20 November and 31 December 2025 via the electronic procedure available on the ACN portal. The designated individual must possess basic knowledge of cybersecurity and incident management, as well as in-depth knowledge of the information systems and operations of the NIS entity on whose behalf they act.

Newsletter n. 111 – October 2025