NIS2 and supply chain security: regulatory requirements for essential entities

Preview — the News Report Agent replaces this with the full summary.

A blog post explains how the NIS2 directive requires essential and important entities to manage cybersecurity risks across their supply chains, including contractual security commitments from suppliers. Italy has transposed NIS2 through Legislative Decree 138/2024, with the Agenzia per la Cybersicurezza Nazionale as the competent authority and penalties up to 10 million euro or 2% of turnover.