Obligation to register on the Agency's cybersecurity platform

We would like to point out to all customers that Legislative Decree No. 138/2024 introduced a number of measures aimed at ensuring a high level of computer security at national level.

Among the new obligations, according to Article 3 of Legislative Decree 138/2024, is the obligation to register on the digital platform of the Agency for National Cybersecurity (ACN) by 28.02.2025 for public and private entities of the types of entities operating in the sectors listed in Annexes 1 (highly critical sectors), 2 (other critical sectors), 3 (specific categories of public administrations) and 4 (residual types of entities included following government identification).

In particular, the obligation to register on the platform exists for enterprises exceeding the size limits set for 'small enterprises'.i.e. employing more than 50 employees or having an annual turnover or balance sheet assets of more than EUR 10 million, and operating in the following sectors set out in Annexes 1 and 2 of the aforementioned Legislative Decree, namely:

    • high criticality sectors listed in Annex 1, i.e. those concerning: energy; transport; banking; financial market infrastructure; health sector; drinking water; waste water; digital infrastructure; ICT services (b2b); space;
    • other critical sectors listed in Annex 2, i.e. those concerning: postal and courier services; waste management; manufacture, production and distribution of chemicals; production, processing and distribution of food; manufacture of medical devices, computer and optical electronic products, electrical machinery and equipment, machinery and equipment not elsewhere classified, manufacture of motor vehicles and trailers and semi-trailers or other means of transport; digital service providers; research.

While remaining at your disposal for any doubts or requests for clarification, we would like to take this opportunity to extend our best regards to all.