Cybersecurity
-

Mapping the risks of Artificial Intelligence: NIST, MIT, CSA and ENISA compared
Before managing AI risks you have to be able to name them. Four tools, all public and free, offer as many perspectives: NIST’s management framework, MIT’s taxonomic repository with over 1,700 catalogued risks, the Cloud Security Alliance’s controls matrix and ENISA’s cybersecurity framework. A reasoned map for those building AI governance. Anyone setting out to…
-

NIS 2, DORA and the Cyber Resilience Act: how to find your way when perimeters overlap
Three European acts, three regulatory logics, one goal: digital resilience. But for those who fall within several perimeters — from a bank to a software vendor — the question is concrete: which discipline prevails? The answer lies in the coordination clauses: Article 4 of NIS 2, the lex specialis of DORA and the complementarity of…
-

The Garante’s 2026 inspection plan: the areas in the spotlight and the lessons of the Emirates case
By deliberation No. 797 of 30 December 2025 the Italian Garante planned its inspection activity for the first half of 2026: artificial intelligence in schools, data breaches of public databases, whistleblowing, health dossiers, energy-sector telemarketing, and anonymisation of Telco big data. And the recent Emirates fine shows that even a lawful legal basis does not…
-

NIS 2 put to the test: notifications, categorisation and security measures in the 2026 roll-out
2026 marks the shift of the Italian transposition of the NIS 2 Directive from the declaratory phase to the implementation phase: the duty to notify significant incidents to CSIRT Italia, the first window for the categorisation of activities and services, and the deadline for adopting baseline security measures. How to find one’s way among ACN…
-

eIDAS 2 Regulation and NIS2 Directive: an integrated framework hard to implement
From the Law & Technology review · agendadigitale.eu.
-

eIDAS 2 Regulation and NIS2 Directive: the close normative-technical connection
From the Law & Technology review · ar.ijeditores.com.
-

In the maze of EU cybersecurity rules: finding your way through the NIS2 Directive
From the Law & Technology review · agendadigitale.eu.
-

-

The hybrid lawyer and cyberethics: between new skills and new responsibilities
From the Law & Technology review · salvisjuribus.it.
-

Italy produces cybersecurity talent but cannot retain it: here’s why
From the Law & Technology review · agendadigitale.eu.