We are pleased to inform you that Comestero Sistemi S.r.l<\/strong>., although not currently subject to the obligations of the NIS\u202f2 Directive<\/strong>, has voluntarily chosen to embark on a structured path to align with the main European and international cybersecurity standards. \u2022 the requirements of Directive (EU) 2022\/2555 \u2013 NIS\u202f2<\/strong>; We believe that cybersecurity should not be merely a regulatory obligation, but a concrete commitment to our clients, partners, and stakeholders. \u2022 strengthening the resilience of our systems; <\/p>\n
\nIn particular, we are implementing:<\/p>\n
\n\u2022 the CIS Controls versione 8.1<\/strong> framework for IT infrastructure protection.<\/p>\nWhy we are doing this?<\/h2>\n
\nInvesting in security today means:<\/p>\n
\n\u2022 protecting the data we process and the information we share;
\n\u2022 providing a more reliable, transparent service that complies with the most advanced standards.<\/p>\nWhat we are implementing<\/h2>\n
\n\n
\n Area<\/strong><\/td>\n Status<\/strong><\/td>\n<\/tr>\n \n Mapping of critical assets and risk<\/td>\n Started<\/td>\n<\/tr>\n \n Adoption of CIS Controls IG1 (essential safeguards)<\/td>\n In progress<\/td>\n<\/tr>\n \n Definition of IT security policies and governance<\/td>\n In implementation<\/td>\n<\/tr>\n \n Incident response and business continuity planning<\/td>\n In drafting phase<\/td>\n<\/tr>\n \n Staff training on NIS\u202f2 principles and cyber hygiene<\/td>\n Scheduled<\/td>\n<\/tr>\n \n Continuous monitoring and security audits<\/td>\n Scheduled<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n Our objectives<\/h2>\n