The path builds, step by step, the incident management process that the NIS2 Directive and Legislative Decree 138/2024 require of organisations: how you prepare, how an incident is detected and classified with the ACN taxonomy, what is notified to CSIRT Italia and when, how you respond technically and what you learn once the incident is closed.
Who it is for: IT and security contacts, CSIRT contacts and NIS points of contact, compliance managers, DPOs and anyone who has to write or apply an incident management plan.
Estimated duration: 26 hours. 6 modules, 103 test questions, 6 exercises, final test and named certificate.
Content updated to October 2026 with the NIS2 Directive and Legislative Decree 138/2024, ACN determinations no. 379907/2025, 127434/2026 and 314287/2026, the ACN incident management guidelines (v1.1, April 2026) based on NIST SP 800-61r3, the ISO/IEC 27035 series, and the link with the other notification obligations: GDPR, Law 90/2024, DORA and the Cyber Resilience Act.
Unlocking progression: each module opens when you pass the test of the previous one (70% threshold, unlimited attempts). At the end, a final test of 30 questions on the whole path, with three attempts one week apart, and, on passing, the certificate in PDF with a verification code.