Epic Assess
ITEN
Resources

NIS2

Tool

D.Lgs. 138/2024, Articles 7, 30 and 42

Updated 23 September 2026

by Victor Mita

NIS2 deadline calendar 2026-2027

Every window on the ACN portal and the deadlines for your cohort, ready to add to your calendar.

Every year NIS2 entities in Italy have three fixed windows on the ACN portal (ACN is the Agenzia per la Cybersicurezza Nazionale, Italy's National Cybersecurity Agency): registration from 1 January to 28 February, the annual update (with the list of relevant suppliers) from 15 April to 31 May, and the categorisation of activities and services from 1 May to 30 June. On top of these come the first-application deadlines, which depend on when you joined the NIS list: for the 2025 cohort the basic measures fall due 18 months after the ACN notice (from October 2026 onwards, depending on when you received it), for the 2026 cohort on 31 July 2027.

Show the deadlines for

Your cohort is the year in which you received from ACN the notice of inclusion in the list of NIS entities. Not received one? Then you are not in any cohort yet: check whether you need to register.

  1. 1 January to 28 February 2027

    Window

    Registration or registration update on the ACN portal

    The point of contact registers the organisation on the ACN portal, or confirms and updates its registration.

    Article 7(1), D.Lgs. 138/2024 · Repeats every year · Add “Registration or registration update on the ACN portal” to your calendar

  2. 28 February 2027

    Deadline

    Last day to register or update your registration

    The annual registration window on the ACN portal closes today.

    Article 7(1), D.Lgs. 138/2024 · Repeats every year · Add “Last day to register or update your registration” to your calendar

  3. 31 March 2027

    For information

    ACN draws up the list of essential and important entities

    ACN draws up the list of essential and important entities and tells each of them whether it has been added to the list, stays on it or leaves it.

    Article 7(2) and (3), D.Lgs. 138/2024 · Repeats every year · Add “ACN draws up the list of essential and important entities” to your calendar

  4. 14 April 2027

    For information

    Last day for the continuous update of information

    Changes that have occurred since the last annual update are submitted through the continuous update service.

    Article 19(2), ACN Determination 127437/2026 · Repeats every year · Add “Last day for the continuous update of information” to your calendar

  5. 15 April to 31 May 2027

    Window

    Annual update on the ACN portal

    You update IP addresses and domain names, the members of the management bodies, the deputy point of contact, the CSIRT liaison and the list of relevant suppliers with their CPV codes.

    Article 7(4), D.Lgs. 138/2024; Articles 16-18, ACN Determination 127437/2026 · Repeats every year · Add “Annual update on the ACN portal” to your calendar

  6. 1 May to 30 June 2027

    Window

    Categorisation of activities and services on the ACN portal

    You submit the list of activities and services with their relevance category, using the template of ACN Determination 155238/2026.

    Article 30(1), D.Lgs. 138/2024; ACN Determination 155238/2026 · Repeats every year · Add “Categorisation of activities and services on the ACN portal” to your calendar

  7. 31 May 2027

    Deadline

    Last day for the annual update and the list of relevant suppliers

    The annual update window on the ACN portal closes today, and with it the list of relevant suppliers.

    Article 7(4), D.Lgs. 138/2024; Articles 16-18, ACN Determination 127437/2026 · Repeats every year · Add “Last day for the annual update and the list of relevant suppliers” to your calendar

  8. 30 June 2027

    Deadline

    Last day for the categorisation of activities and services

    The window to submit the categorised activities and services closes today.

    Article 30(1), D.Lgs. 138/2024 · Repeats every year · Add “Last day for the categorisation of activities and services” to your calendar

Do not miss the next window

Add the “All NIS entities” calendar to Google Calendar, Outlook or Apple Calendar: when ACN moves a date, we update it for you.

Add to calendar

Feed address: https://staging.epicassess.com/calendario/en/nis2-tutti.ics

Email reminders are not available yet: for now, the calendar is the way not to miss a deadline.

What you will not find here

  • The deadlines for entities that will join the list in 2027: ACN has not published them yet. We will add them as soon as they are out.
  • Changes to registered information: they must be reported within 14 days of happening (Article 7(7)), so they have no fixed date.
  • Incident notification deadlines (24 hours, 72 hours, one month): they run from when the organisation becomes aware of the significant incident (Article 25(5), D.Lgs. 138/2024).
  • Email reminders: they are not active yet. For now you can add the calendar to Google Calendar, Outlook or Apple Calendar.

The calendar in English

The calendar files offered on this page are in English. The Italian page offers the same events, with the same dates, in Italian. Each event has the same identifier in both, so adding it twice updates it instead of duplicating it.

A note on the dates

The dates come from Legislative Decree 138/2024 (D.Lgs. 138/2024), Italy's NIS2 transposition, and from the ACN determinations published up to 23 September 2026. The calendar is for information only: the official texts and the communications you receive from ACN prevail. If a date changes, we update the page and the feed.

Sources

The sources are official texts, published in Italian.

Updated 23 September 2026. If a source changes, we update the page.

Back to resources