September 16, 2026
For organizations that receive notification from the ACN during 2025, 2026 marks the year when the obligations set out in the NIS2 directive fully enter the […]
September 8, 2026
The Cyber Resilience Act (CRA) is the first European Union regulation to introduce mandatory cybersecurity requirements for all connected hardware and software products, applying the principle […]
August 31, 2026
In recent years, Cyber Risk Management has undergone a profound transformation, driven by regulatory developments and steadily increasing technological complexity. Together, these forces have expanded organizations’ […]
July 14, 2026
In early July, the Italian National Cybersecurity Agency, ACN, updated several FAQs published on its website and introduced new ones. More specifically, FAQs ODA.8 and ODA.9 […]
July 6, 2026
A critical vulnerability on an endpoint and a board-level decision seem to belong to two different worlds, and yet the distance between them is what tests […]
June 16, 2026
In many organizations, application risk gets associated mainly with the most visible systems, the ones that support essential processes and therefore stay under the constant attention […]
May 26, 2026
When a risk analysis returns a reassuring rating across several areas of the perimeter, a company typically interprets the result as confirmation of its security posture. […]
May 6, 2026
Many security reports presented to the Board of Directors are still built around technical metrics that do not enable decision-makers to fully understand the organization’s real […]
April 10, 2026
Risk is not a Checklist. It’s a system of relationships. In cyber risk, a simplification continues to spread that, while convenient to adopt, struggles to hold […]