NIS2
Templates
Det. ACN 379907/2025, measures GV.PO-01 and RS.MA-01
Updated 23 September 2026
by Victor Mita
The incident management plan and the security policy, structured on the ACN requirements, to download and adapt. The templates are Italian documents for companies in Italy.
Two free templates, built on the requirements of the ACN basic measures: the incident management plan (measure RS.MA-01), with a sheet to prepare the pre-notification (pre-notifica) to CSIRT Italia, and the cybersecurity policy (measure GV.PO-01), with the 16 areas that ACN asks you to cover. They are Word documents to adapt to your organisation and have approved by the management bodies. The download is direct, with no sign-up.
The templates are in Italian.They are Italian documents for companies in Italy, written on the Italian text of Legislative Decree 138/2024 (D.Lgs. 138/2024), Italy's NIS2 transposition, and of the ACN requirements. This page is in English; the files are not translated.
ACN measure RS.MA-01 · Article 25 D.Lgs. 138/2024
Phases and roles of incident management, the deadlines for notifying CSIRT Italia (24 hours, 72 hours, one month) and a sheet to fill in ahead of time, so you do not start from scratch in the first hours.
Word (.docx), in Italian. Document title: Piano di gestione degli incidenti di sicurezza informatica
ACN measure GV.PO-01 · Article 24 D.Lgs. 138/2024
The structure of the policy with the 16 areas required by the basic measures, from risk management to incident response, and space for approval by the management bodies.
Word (.docx), in Italian. Document title: Politica di sicurezza informatica
These templates are provided free of charge by Mokka Studios for information purposes, as a starting point. They are not legal or technical advice and do not guarantee compliance with D.Lgs. 138/2024 or with the ACN determinations: they must be adapted to your organisation, checked by someone with the relevant expertise and approved by the management bodies. The official texts published on normattiva.it and acn.gov.it prevail. Mokka Studios is not responsible for how they are used. Updated to 23 September 2026 (ACN Determination 379907/2025).
The templates are for companies subject to NIS2 in Italy. They quote the ACN requirements word for word, in the Italian in which ACN publishes them, and they are documents your management bodies approve and ACN may ask to see. A translation would add a second version to keep aligned with the official wording, so we have not made one. If you need to share them with colleagues who do not read Italian, this page describes what each one contains.
Licence: You may use and modify these templates for your own organisation. You may not resell them.
The sources are official texts, published in Italian.
Updated 23 September 2026. If a source changes, we update the page.
