{"id":13906,"date":"2026-04-03T23:59:31","date_gmt":"2026-04-03T21:59:31","guid":{"rendered":"https:\/\/fortgale.com\/it\/?page_id=13906"},"modified":"2026-04-04T00:02:46","modified_gmt":"2026-04-03T22:02:46","slug":"nis2-notifica-incidente","status":"publish","type":"page","link":"https:\/\/fortgale.com\/it\/nis2-notifica-incidente\/","title":{"rendered":"NIS2: Entro Quanto Tempo Notificare un Incidente al CSIRT Italia | Fortgale"},"content":{"rendered":"
\n \n
\n \n \n
\n \n
\n \n
\n \n
\n
\n \n \n
\n \n
\n \n
\n \n\n\n\n \n \n NIS2: Entro Quanto Tempo Notificare un Incidente al CSIRT Italia | Fortgale<\/title>\n <meta name=\"description\" content=\"NIS2 impone 24 ore per l'early warning, 72 ore per la notifica e 30 giorni per il report finale al CSIRT Italia. Scopri le scadenze, cosa notificare e come Fortgale supporta la tua azienda.\">\n <meta name=\"keywords\" content=\"NIS2 notifica incidente, CSIRT Italia, notifica CSIRT, NIS2 Italia, obbligo notifica cyber incidente, NIS2 tempistiche, decreto 138 2024, incidente significativo NIS2, early warning NIS2, NIS2 adempimenti\">\n <meta name=\"robots\" content=\"index, follow\">\n <link rel=\"canonical\" href=\"https:\/\/fortgale.com\/it\/nis2-notifica-incidente\/\">\n\n <meta property=\"og:title\" content=\"NIS2: Entro Quanto Tempo Notificare un Incidente al CSIRT Italia \u2014 Fortgale\">\n <meta property=\"og:description\" content=\"24 ore, 72 ore, 30 giorni: le tre scadenze NIS2 per la notifica degli incidenti al CSIRT Italia. Guida pratica con obblighi, contenuti e supporto operativo.\">\n <meta property=\"og:type\" content=\"article\">\n <meta property=\"og:url\" content=\"https:\/\/fortgale.com\/it\/nis2-notifica-incidente\/\">\n\n <script type=\"application\/ld+json\">\n {\n \"@context\": \"https:\/\/schema.org\",\n \"@type\": \"Article\",\n \"headline\": \"NIS2: Entro Quanto Tempo Notificare un Incidente al CSIRT Italia\",\n \"description\": \"Guida completa agli obblighi di notifica degli incidenti informatici previsti dalla Direttiva NIS2 (D.Lgs. 138\/2024): tempistiche, cosa notificare, a chi, come e cosa rischia l'azienda in caso di mancata notifica.\",\n \"url\": \"https:\/\/fortgale.com\/it\/nis2-notifica-incidente\/\",\n \"inLanguage\": \"it-IT\",\n \"publisher\": {\n \"@type\": \"Organization\",\n \"name\": \"Fortgale\",\n \"url\": \"https:\/\/fortgale.com\/it\/\",\n \"logo\": \"https:\/\/fortgale.com\/it\/wp-content\/uploads\/sites\/9\/2023\/02\/cropped-fortgale_logo.png\",\n \"address\": {\n \"@type\": \"PostalAddress\",\n \"streetAddress\": \"Via San Damiano 2\",\n \"addressLocality\": \"Milano\",\n \"addressCountry\": \"IT\"\n }\n }\n }\n <\/script>\n\n <script type=\"application\/ld+json\">\n {\n \"@context\": \"https:\/\/schema.org\",\n \"@type\": \"FAQPage\",\n \"mainEntity\": [{\n \"@type\": \"Question\",\n \"name\": \"Cos'\u00e8 un incidente significativo ai sensi della NIS2?\",\n \"acceptedAnswer\": {\n \"@type\": \"Answer\",\n \"text\": \"Un incidente \u00e8 considerato significativo ai sensi della NIS2 (D.Lgs. 138\/2024) quando causa o pu\u00f2 causare una grave perturbazione operativa, perdite finanziarie rilevanti per il soggetto colpito, oppure danni significativi a persone fisiche o giuridiche terze. I parametri specifici includono: numero di utenti colpiti, durata dell'interruzione, impatto geografico, e criticit\u00e0 del servizio interrotto. ACN pubblicher\u00e0 criteri tecnici dettagliati per ciascun settore.\"\n }\n },\n {\n \"@type\": \"Question\",\n \"name\": \"Cosa succede se non si notifica l'incidente entro le 24 ore?\",\n \"acceptedAnswer\": {\n \"@type\": \"Answer\",\n \"text\": \"La mancata o tardiva notifica al CSIRT Italia espone il soggetto obbligato a sanzioni amministrative significative: fino a 10 milioni di euro o il 2% del fatturato annuo globale per i soggetti essenziali; fino a 7 milioni di euro o l'1,4% del fatturato per i soggetti importanti. L'ACN pu\u00f2 inoltre disporre misure cautelari, limitazione temporanea delle attivit\u00e0 e, per i dirigenti responsabili, sanzioni personali.\"\n }\n },\n {\n \"@type\": \"Question\",\n \"name\": \"La notifica al CSIRT Italia protegge l'azienda da responsabilit\u00e0 legali?\",\n \"acceptedAnswer\": {\n \"@type\": \"Answer\",\n \"text\": \"La notifica \u00e8 un obbligo di legge, non una protezione automatica da responsabilit\u00e0. Notificare correttamente e nei tempi previsti dimostra la conformit\u00e0 agli obblighi NIS2 e pu\u00f2 attenuare le sanzioni in caso di violazione. Non notificare, al contrario, aggrava la posizione dell'azienda sia sul piano amministrativo che in eventuali contenziosi civili con soggetti terzi danneggiati dall'incidente.\"\n }\n },\n {\n \"@type\": \"Question\",\n \"name\": \"Quali informazioni servono per la notifica di 72 ore al CSIRT?\",\n \"acceptedAnswer\": {\n \"@type\": \"Answer\",\n \"text\": \"La notifica delle 72 ore deve includere: classificazione dell'incidente e impatto stimato, cause iniziali identificate (se note), indicatori di compromissione (IOC), sistemi e dati coinvolti, misure di contenimento adottate, numero di utenti o servizi impattati, e impatto transfrontaliero se applicabile. \u00c8 fortemente consigliato avere un team tecnico che supporti la raccolta di queste informazioni nel minor tempo possibile.\"\n }\n },\n {\n \"@type\": \"Question\",\n \"name\": \"Le PMI sono soggette agli obblighi di notifica NIS2?\",\n \"acceptedAnswer\": {\n \"@type\": \"Answer\",\n \"text\": \"Le PMI con meno di 50 dipendenti e meno di 10 milioni di euro di fatturato sono generalmente escluse dalla NIS2, salvo operino in settori ad alta criticit\u00e0 (energia, trasporti, infrastrutture digitali, sanit\u00e0) o siano identificate come soggetti critici da ACN indipendentemente dalla dimensione. Le medie imprese (50\u2013249 dipendenti, 10\u201350M\u20ac fatturato) rientrano nella categoria dei soggetti importanti e sono soggette a obblighi meno stringenti rispetto ai soggetti essenziali.\"\n }\n }\n ]\n }\n <\/script>\n\n <link rel=\"preconnect\" href=\"https:\/\/fonts.googleapis.com\">\n <link rel=\"preconnect\" href=\"https:\/\/fonts.gstatic.com\" crossorigin=\"\">\n <link href=\"https:\/\/fonts.googleapis.com\/css2?family=Poppins:wght@300;400;500;600;700;800&family=JetBrains+Mono:wght@400;600&display=swap\" rel=\"stylesheet\">\n\n <style>\n *,\n *::before,\n *::after {\n box-sizing: border-box;\n margin: 0;\n padding: 0;\n }\n\n :root {\n --navy: #001B3B;\n --navy-mid: #0A2250;\n --navy-btn: #303E7A;\n --navy-light: #1a2e5a;\n --white: #FFFFFF;\n --gray-light: #F2F2F2;\n --gray-mid: #C3C4C7;\n --text-dark: #001B3B;\n --text-body: #2c3340;\n --text-muted: #65615f;\n --amber: #c9920a;\n --amber-light: #f5c842;\n --amber-glow: rgba(245, 200, 66, 0.15);\n --amber-dim: rgba(245, 200, 66, 0.55);\n --red: #c0392b;\n --red-dim: rgba(192, 57, 43, 0.15);\n --orange: #e67e22;\n --orange-dim: rgba(230, 126, 34, 0.15);\n --teal: #00c2a8;\n --teal-dim: rgba(0, 194, 168, 0.15);\n }\n\n html {\n scroll-behavior: smooth;\n }\n\n body {\n font-family: 'Poppins', sans-serif;\n color: var(--text-body);\n background: var(--white);\n line-height: 1.7;\n font-size: 16px;\n }\n\n a {\n text-decoration: none;\n color: inherit;\n }\n\n img {\n max-width: 100%;\n display: block;\n }\n\n \/* \u2500\u2500\u2500 HERO \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .hero {\n background: linear-gradient(to right, rgba(0, 27, 59, 0.97) 46%, rgba(0, 27, 59, 0.62) 100%), url('https:\/\/fortgale.com\/it\/wp-content\/uploads\/sites\/9\/2026\/03\/managed-detection-and-response-mdr.png') center\/cover no-repeat;\n min-height: 100vh;\n display: flex;\n align-items: center;\n position: relative;\n overflow: hidden;\n padding-top: 40px;\n }\n\n .hero::before {\n content: '';\n position: absolute;\n inset: 0;\n background-image: linear-gradient(rgba(192, 57, 43, 0.04) 1px, transparent 1px), linear-gradient(90deg, rgba(192, 57, 43, 0.04) 1px, transparent 1px);\n background-size: 60px 60px;\n pointer-events: none;\n }\n\n .hero-content {\n position: relative;\n z-index: 3;\n padding: 80px 80px 140px;\n max-width: 620px;\n }\n\n .hero-tag {\n display: inline-block;\n font-size: 11px;\n font-weight: 600;\n letter-spacing: 0.15em;\n text-transform: uppercase;\n color: var(--amber-light);\n border: 1px solid rgba(245, 200, 66, 0.35);\n padding: 5px 14px;\n border-radius: 3px;\n margin-bottom: 28px;\n }\n\n .hero h1 {\n font-size: clamp(32px, 3.6vw, 50px);\n font-weight: 800;\n color: var(--white);\n line-height: 1.13;\n margin-bottom: 24px;\n letter-spacing: -0.02em;\n }\n\n .hero h1 span {\n color: var(--amber-light);\n }\n\n .hero h1 .red {\n color: #f1a1a1;\n }\n\n .hero-subtitle {\n font-size: 17px;\n font-weight: 400;\n color: rgba(240, 246, 252, 0.72);\n line-height: 1.75;\n margin-bottom: 40px;\n max-width: 520px;\n }\n\n .hero-ctas {\n display: flex;\n gap: 16px;\n flex-wrap: wrap;\n }\n\n \/* \u2500\u2500\u2500 HERO RIGHT: CLOCK PANEL \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .clock-panel {\n position: absolute;\n right: 7%;\n top: 50%;\n transform: translateY(-50%);\n width: 360px;\n z-index: 4;\n }\n\n .clock-box {\n background: rgba(4, 13, 26, 0.86);\n border: 1px solid rgba(255, 255, 255, 0.09);\n border-radius: 14px;\n padding: 26px 28px;\n backdrop-filter: blur(12px);\n box-shadow: 0 24px 64px rgba(0, 0, 0, 0.5);\n }\n\n .clock-header {\n display: flex;\n align-items: center;\n gap: 10px;\n margin-bottom: 22px;\n padding-bottom: 14px;\n border-bottom: 1px solid rgba(255, 255, 255, 0.07);\n }\n\n .clock-dot {\n width: 8px;\n height: 8px;\n border-radius: 50%;\n background: #f1a1a1;\n box-shadow: 0 0 8px rgba(241, 161, 161, 0.6);\n animation: blink 1.8s ease-in-out infinite;\n }\n\n .clock-title {\n font-size: 11px;\n font-weight: 700;\n letter-spacing: 0.14em;\n text-transform: uppercase;\n color: rgba(255, 255, 255, 0.65);\n }\n\n .clock-event {\n margin-bottom: 14px;\n }\n\n .clock-event:last-child {\n margin-bottom: 0;\n }\n\n .clock-event-header {\n display: flex;\n justify-content: space-between;\n align-items: center;\n margin-bottom: 6px;\n }\n\n .clock-event-label {\n font-size: 12px;\n font-weight: 700;\n color: rgba(255, 255, 255, 0.85);\n }\n\n .clock-event-badge {\n font-size: 10px;\n font-weight: 700;\n letter-spacing: 0.1em;\n text-transform: uppercase;\n padding: 3px 9px;\n border-radius: 20px;\n }\n\n .badge-red {\n background: rgba(192, 57, 43, 0.2);\n color: #f1a1a1;\n border: 1px solid rgba(192, 57, 43, 0.4);\n }\n\n .badge-orange {\n background: rgba(230, 126, 34, 0.2);\n color: #f0a96a;\n border: 1px solid rgba(230, 126, 34, 0.4);\n }\n\n .badge-amber {\n background: rgba(245, 200, 66, 0.12);\n color: var(--amber-light);\n border: 1px solid rgba(245, 200, 66, 0.3);\n }\n\n .badge-teal {\n background: rgba(0, 194, 168, 0.15);\n color: var(--teal);\n border: 1px solid rgba(0, 194, 168, 0.3);\n }\n\n .clock-bar-track {\n height: 5px;\n background: rgba(255, 255, 255, 0.07);\n border-radius: 4px;\n overflow: hidden;\n }\n\n .clock-bar-fill {\n height: 100%;\n border-radius: 4px;\n }\n\n .clock-bar-fill.red {\n background: linear-gradient(90deg, #c0392b, #f1a1a1);\n }\n\n .clock-bar-fill.orange {\n background: linear-gradient(90deg, #e67e22, #f0a96a);\n }\n\n .clock-bar-fill.amber {\n background: linear-gradient(90deg, var(--amber), var(--amber-light));\n }\n\n .clock-sublabel {\n font-size: 10px;\n color: rgba(255, 255, 255, 0.35);\n margin-top: 5px;\n font-family: 'JetBrains Mono', monospace;\n }\n\n .clock-separator {\n height: 1px;\n background: rgba(255, 255, 255, 0.06);\n margin: 16px 0;\n }\n\n .clock-status {\n display: flex;\n align-items: center;\n gap: 10px;\n background: rgba(192, 57, 43, 0.1);\n border: 1px solid rgba(192, 57, 43, 0.25);\n border-radius: 8px;\n padding: 12px 14px;\n margin-top: 16px;\n }\n\n .clock-status-icon {\n font-size: 18px;\n flex-shrink: 0;\n }\n\n .clock-status-text {\n font-size: 12px;\n color: rgba(255, 255, 255, 0.8);\n line-height: 1.5;\n }\n\n .clock-status-text strong {\n color: #f1a1a1;\n display: block;\n font-size: 13px;\n }\n\n \/* \u2500\u2500\u2500 ANIMATIONS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n @keyframes blink {\n 0%,\n 100% {\n opacity: 1\n }\n 50% {\n opacity: .25\n }\n }\n\n @keyframes pulse-ring {\n 0% {\n transform: translate(-50%, -50%) scale(0.6);\n opacity: 0.9;\n }\n 100% {\n transform: translate(-50%, -50%) scale(2.6);\n opacity: 0;\n }\n }\n\n @keyframes bar-grow {\n from {\n width: 0;\n }\n to {\n width: 100%;\n }\n }\n\n @keyframes count-tick {\n from {\n opacity: 0;\n }\n to {\n opacity: 1;\n }\n }\n\n \/* \u2500\u2500\u2500 HERO BOTTOM \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .hero-bottom {\n position: absolute;\n bottom: 36px;\n left: 80px;\n display: flex;\n gap: 48px;\n }\n\n .hero-stat-value {\n font-size: 30px;\n font-weight: 800;\n color: var(--white);\n line-height: 1;\n }\n\n .hero-stat-value.accent {\n color: var(--amber-light);\n }\n\n .hero-stat-value.red {\n color: #f1a1a1;\n }\n\n .hero-stat-label {\n font-size: 11px;\n font-weight: 500;\n color: rgba(240, 246, 252, 0.5);\n text-transform: uppercase;\n letter-spacing: 0.08em;\n margin-top: 4px;\n }\n\n \/* \u2500\u2500\u2500 BUTTONS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .btn-primary {\n background: var(--navy-btn);\n color: var(--white);\n font-family: 'Poppins', sans-serif;\n font-size: 12px;\n font-weight: 600;\n letter-spacing: 0.1em;\n text-transform: uppercase;\n padding: 14px 30px;\n border-radius: 56px;\n border: 1.6px solid var(--navy-btn);\n cursor: pointer;\n transition: all 0.25s;\n display: inline-block;\n }\n\n .btn-primary:hover {\n background: #253070;\n border-color: #253070;\n transform: translateY(-1px);\n box-shadow: 0 6px 20px rgba(0, 0, 0, 0.25);\n }\n\n .btn-amber {\n background: transparent;\n color: var(--amber-light);\n font-family: 'Poppins', sans-serif;\n font-size: 12px;\n font-weight: 600;\n letter-spacing: 0.1em;\n text-transform: uppercase;\n padding: 14px 30px;\n border-radius: 56px;\n border: 1.6px solid rgba(245, 200, 66, 0.5);\n cursor: pointer;\n transition: all 0.25s;\n display: inline-block;\n }\n\n .btn-amber:hover {\n border-color: var(--amber-light);\n background: rgba(245, 200, 66, 0.06);\n }\n\n .btn-amber-solid {\n background: var(--amber-light);\n color: var(--navy);\n font-family: 'Poppins', sans-serif;\n font-size: 12px;\n font-weight: 700;\n letter-spacing: 0.1em;\n text-transform: uppercase;\n padding: 14px 30px;\n border-radius: 56px;\n border: none;\n cursor: pointer;\n transition: all 0.25s;\n display: inline-block;\n }\n\n .btn-amber-solid:hover {\n background: #f8d54e;\n transform: translateY(-1px);\n box-shadow: 0 6px 20px rgba(245, 200, 66, 0.3);\n }\n\n .btn-red {\n background: rgba(192, 57, 43, 0.9);\n color: var(--white);\n font-family: 'Poppins', sans-serif;\n font-size: 12px;\n font-weight: 700;\n letter-spacing: 0.1em;\n text-transform: uppercase;\n padding: 14px 30px;\n border-radius: 56px;\n border: none;\n cursor: pointer;\n transition: all 0.25s;\n display: inline-block;\n }\n\n .btn-red:hover {\n background: #a93226;\n transform: translateY(-1px);\n box-shadow: 0 6px 20px rgba(192, 57, 43, 0.35);\n }\n\n .btn-secondary {\n background: transparent;\n color: var(--white);\n font-family: 'Poppins', sans-serif;\n font-size: 12px;\n font-weight: 600;\n letter-spacing: 0.1em;\n text-transform: uppercase;\n padding: 14px 30px;\n border-radius: 56px;\n border: 1.6px solid rgba(255, 255, 255, 0.4);\n cursor: pointer;\n transition: all 0.25s;\n display: inline-block;\n }\n\n .btn-secondary:hover {\n border-color: var(--white);\n background: rgba(255, 255, 255, 0.07);\n }\n\n \/* \u2500\u2500\u2500 GENERAL SECTIONS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .section {\n padding: 96px 80px;\n }\n\n .section-narrow {\n max-width: 1200px;\n margin: 0 auto;\n }\n\n .section-tag {\n display: inline-block;\n font-size: 11px;\n font-weight: 700;\n letter-spacing: 0.18em;\n text-transform: uppercase;\n color: var(--navy-btn);\n margin-bottom: 16px;\n }\n\n .section-tag-amber {\n color: var(--amber-dim);\n }\n\n .section-tag-light {\n color: rgba(245, 200, 66, 0.7);\n }\n\n .section-tag-red {\n color: rgba(241, 161, 161, 0.8);\n }\n\n .section h2 {\n font-size: clamp(26px, 2.8vw, 38px);\n font-weight: 800;\n color: var(--text-dark);\n line-height: 1.2;\n letter-spacing: -0.02em;\n margin-bottom: 20px;\n }\n\n .section-dark h2 {\n color: var(--white);\n }\n\n .section-lead {\n font-size: 17px;\n color: var(--text-muted);\n max-width: 720px;\n line-height: 1.75;\n margin-bottom: 56px;\n }\n\n .section-dark .section-lead {\n color: rgba(240, 246, 252, 0.68);\n }\n\n .section-dark {\n background: var(--navy);\n color: var(--white);\n }\n\n .section-alt {\n background: var(--gray-light);\n }\n\n .section-ink {\n background: #040d1a;\n }\n\n \/* \u2500\u2500\u2500 URGENCY BANNER \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .urgency-banner {\n background: rgba(192, 57, 43, 0.08);\n border: 1px solid rgba(192, 57, 43, 0.25);\n border-left: 5px solid #c0392b;\n border-radius: 0 10px 10px 0;\n padding: 22px 28px;\n margin-bottom: 52px;\n display: flex;\n gap: 18px;\n align-items: flex-start;\n max-width: 860px;\n }\n\n .urgency-banner-icon {\n font-size: 22px;\n flex-shrink: 0;\n margin-top: 2px;\n }\n\n .urgency-banner-text {\n font-size: 15px;\n color: var(--text-dark);\n line-height: 1.7;\n }\n\n .urgency-banner-text strong {\n color: #c0392b;\n }\n\n \/* \u2500\u2500\u2500 TIMELINE SCADENZE \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .timeline-cards {\n display: grid;\n grid-template-columns: repeat(3, 1fr);\n gap: 24px;\n margin-top: 52px;\n }\n\n .tcard {\n border-radius: 14px;\n padding: 36px 32px;\n position: relative;\n overflow: hidden;\n border: 1px solid transparent;\n transition: transform 0.25s, box-shadow 0.25s;\n }\n\n .tcard:hover {\n transform: translateY(-5px);\n }\n\n .tcard.t-red {\n background: rgba(192, 57, 43, 0.07);\n border-color: rgba(192, 57, 43, 0.2);\n }\n\n .tcard.t-orange {\n background: rgba(230, 126, 34, 0.07);\n border-color: rgba(230, 126, 34, 0.2);\n }\n\n .tcard.t-amber {\n background: rgba(245, 200, 66, 0.06);\n border-color: rgba(245, 200, 66, 0.2);\n }\n\n .tcard.t-red:hover {\n box-shadow: 0 16px 40px rgba(192, 57, 43, 0.12);\n }\n\n .tcard.t-orange:hover {\n box-shadow: 0 16px 40px rgba(230, 126, 34, 0.1);\n }\n\n .tcard.t-amber:hover {\n box-shadow: 0 16px 40px rgba(245, 200, 66, 0.1);\n }\n\n .tcard-num {\n font-size: 56px;\n font-weight: 800;\n line-height: 1;\n margin-bottom: 4px;\n letter-spacing: -0.03em;\n font-variant-numeric: tabular-nums;\n }\n\n .tcard.t-red .tcard-num {\n color: rgba(192, 57, 43, 0.85);\n }\n\n .tcard.t-orange .tcard-num {\n color: rgba(230, 126, 34, 0.85);\n }\n\n .tcard.t-amber .tcard-num {\n color: rgba(200, 160, 10, 0.85);\n }\n\n .tcard-unit {\n font-size: 14px;\n font-weight: 700;\n text-transform: uppercase;\n letter-spacing: 0.08em;\n margin-bottom: 18px;\n }\n\n .tcard.t-red .tcard-unit {\n color: #c0392b;\n }\n\n .tcard.t-orange .tcard-unit {\n color: var(--orange);\n }\n\n .tcard.t-amber .tcard-unit {\n color: var(--amber);\n }\n\n .tcard-type {\n font-size: 18px;\n font-weight: 800;\n color: var(--text-dark);\n margin-bottom: 12px;\n line-height: 1.25;\n }\n\n .tcard-desc {\n font-size: 14px;\n color: var(--text-muted);\n line-height: 1.75;\n margin-bottom: 20px;\n }\n\n .tcard-must {\n font-size: 13px;\n font-weight: 600;\n color: var(--text-dark);\n margin-bottom: 8px;\n }\n\n .tcard-items {\n list-style: none;\n display: flex;\n flex-direction: column;\n gap: 7px;\n }\n\n .tcard-items li {\n font-size: 13px;\n color: var(--text-muted);\n display: flex;\n gap: 8px;\n align-items: flex-start;\n line-height: 1.5;\n }\n\n .tcard-items li::before {\n content: '\u25b8';\n font-size: 10px;\n margin-top: 4px;\n flex-shrink: 0;\n }\n\n .tcard.t-red .tcard-items li::before {\n color: #c0392b;\n }\n\n .tcard.t-orange .tcard-items li::before {\n color: var(--orange);\n }\n\n .tcard.t-amber .tcard-items li::before {\n color: var(--amber);\n }\n\n .tcard-footer {\n margin-top: 20px;\n padding-top: 16px;\n border-top: 1px solid rgba(0, 27, 59, 0.08);\n font-size: 11px;\n font-weight: 700;\n letter-spacing: 0.1em;\n text-transform: uppercase;\n }\n\n .tcard.t-red .tcard-footer {\n color: #c0392b;\n }\n\n .tcard.t-orange .tcard-footer {\n color: var(--orange);\n }\n\n .tcard.t-amber .tcard-footer {\n color: var(--amber);\n }\n\n \/* \u2500\u2500\u2500 INCIDENTE SIGNIFICATIVO \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .sig-grid {\n display: grid;\n grid-template-columns: repeat(2, 1fr);\n gap: 20px;\n margin-top: 52px;\n }\n\n .sig-card {\n background: rgba(255, 255, 255, 0.03);\n border: 1px solid rgba(255, 255, 255, 0.08);\n border-radius: 12px;\n padding: 32px 28px;\n transition: background 0.25s, border-color 0.25s;\n }\n\n .sig-card:hover {\n background: rgba(255, 255, 255, 0.05);\n border-color: rgba(245, 200, 66, 0.25);\n }\n\n .sig-icon {\n font-size: 28px;\n margin-bottom: 14px;\n }\n\n .sig-title {\n font-size: 17px;\n font-weight: 800;\n color: var(--white);\n margin-bottom: 10px;\n }\n\n .sig-desc {\n font-size: 14px;\n color: rgba(240, 246, 252, 0.62);\n line-height: 1.72;\n }\n\n .sig-ex {\n margin-top: 12px;\n font-size: 12px;\n font-family: 'JetBrains Mono', monospace;\n color: rgba(245, 200, 66, 0.7);\n border-left: 2px solid rgba(245, 200, 66, 0.25);\n padding-left: 10px;\n line-height: 1.6;\n }\n\n \/* \u2500\u2500\u2500 COSA NOTIFICARE \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .notify-phases {\n display: flex;\n flex-direction: column;\n gap: 0;\n margin-top: 48px;\n }\n\n .notify-phase {\n display: grid;\n grid-template-columns: 220px 1fr;\n gap: 0;\n border: 1px solid rgba(0, 27, 59, 0.1);\n border-bottom: none;\n }\n\n .notify-phase:first-child {\n border-radius: 12px 12px 0 0;\n }\n\n .notify-phase:last-child {\n border-bottom: 1px solid rgba(0, 27, 59, 0.1);\n border-radius: 0 0 12px 12px;\n }\n\n .notify-phase-label {\n padding: 28px 24px;\n display: flex;\n flex-direction: column;\n justify-content: center;\n border-right: 1px solid rgba(0, 27, 59, 0.1);\n }\n\n .notify-phase-label.ph-red {\n background: rgba(192, 57, 43, 0.06);\n }\n\n .notify-phase-label.ph-orange {\n background: rgba(230, 126, 34, 0.05);\n }\n\n .notify-phase-label.ph-amber {\n background: rgba(245, 200, 66, 0.05);\n }\n\n .notify-phase-time {\n font-size: 26px;\n font-weight: 800;\n line-height: 1;\n margin-bottom: 4px;\n }\n\n .ph-red .notify-phase-time {\n color: #c0392b;\n }\n\n .ph-orange .notify-phase-time {\n color: var(--orange);\n }\n\n .ph-amber .notify-phase-time {\n color: var(--amber);\n }\n\n .notify-phase-unit {\n font-size: 11px;\n font-weight: 700;\n text-transform: uppercase;\n letter-spacing: 0.1em;\n color: var(--text-muted);\n }\n\n .notify-phase-name {\n font-size: 12px;\n font-weight: 600;\n color: var(--text-dark);\n margin-top: 8px;\n }\n\n .notify-phase-body {\n padding: 24px 28px;\n }\n\n .notify-field-list {\n display: flex;\n flex-direction: column;\n gap: 10px;\n }\n\n .notify-field {\n display: flex;\n gap: 10px;\n align-items: flex-start;\n font-size: 14px;\n color: var(--text-body);\n line-height: 1.55;\n }\n\n .notify-field-dot {\n width: 18px;\n height: 18px;\n border-radius: 50%;\n flex-shrink: 0;\n display: flex;\n align-items: center;\n justify-content: center;\n font-size: 9px;\n font-weight: 800;\n margin-top: 2px;\n }\n\n .ph-red .notify-field-dot {\n background: rgba(192, 57, 43, 0.12);\n color: #c0392b;\n border: 1px solid rgba(192, 57, 43, 0.3);\n }\n\n .ph-orange .notify-field-dot {\n background: rgba(230, 126, 34, 0.12);\n color: var(--orange);\n border: 1px solid rgba(230, 126, 34, 0.3);\n }\n\n .ph-amber .notify-field-dot {\n background: rgba(245, 200, 66, 0.1);\n color: var(--amber);\n border: 1px solid rgba(245, 200, 66, 0.25);\n }\n\n \/* \u2500\u2500\u2500 SANZIONI \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .sanzioni-grid {\n display: grid;\n grid-template-columns: repeat(2, 1fr);\n gap: 24px;\n margin-top: 52px;\n }\n\n .sanzione-card {\n background: var(--white);\n border: 1px solid rgba(192, 57, 43, 0.15);\n border-radius: 12px;\n padding: 36px 32px;\n position: relative;\n overflow: hidden;\n transition: transform 0.25s, box-shadow 0.25s;\n }\n\n .sanzione-card:hover {\n transform: translateY(-3px);\n box-shadow: 0 12px 40px rgba(192, 57, 43, 0.08);\n }\n\n .sanzione-card::before {\n content: '';\n position: absolute;\n top: 0;\n left: 0;\n right: 0;\n height: 3px;\n background: linear-gradient(90deg, #c0392b, rgba(192, 57, 43, 0.3));\n }\n\n .sanzione-type {\n font-size: 12px;\n font-weight: 700;\n letter-spacing: 0.12em;\n text-transform: uppercase;\n color: var(--text-muted);\n margin-bottom: 12px;\n }\n\n .sanzione-amount {\n font-size: 32px;\n font-weight: 800;\n color: #c0392b;\n line-height: 1;\n margin-bottom: 8px;\n }\n\n .sanzione-or {\n font-size: 12px;\n color: var(--text-muted);\n margin-bottom: 6px;\n }\n\n .sanzione-pct {\n font-size: 20px;\n font-weight: 800;\n color: #c0392b;\n margin-bottom: 16px;\n }\n\n .sanzione-desc {\n font-size: 14px;\n color: var(--text-muted);\n line-height: 1.7;\n }\n\n .sanzione-extra {\n margin-top: 16px;\n padding-top: 14px;\n border-top: 1px solid rgba(192, 57, 43, 0.1);\n font-size: 13px;\n color: var(--text-body);\n line-height: 1.6;\n }\n\n .sanzione-extra strong {\n color: #c0392b;\n }\n\n \/* \u2500\u2500\u2500 CTA URGENZA \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .cta-urgency {\n background: linear-gradient(135deg, #1a0a0a 0%, #0d0508 100%);\n border: 1px solid rgba(192, 57, 43, 0.3);\n border-radius: 16px;\n padding: 52px 56px;\n margin-top: 56px;\n position: relative;\n overflow: hidden;\n }\n\n .cta-urgency::before {\n content: '';\n position: absolute;\n inset: 0;\n background: radial-gradient(ellipse at 30% 50%, rgba(192, 57, 43, 0.08) 0%, transparent 60%);\n }\n\n .cta-urgency-eyebrow {\n font-size: 11px;\n font-weight: 700;\n letter-spacing: 0.18em;\n text-transform: uppercase;\n color: #f1a1a1;\n margin-bottom: 16px;\n position: relative;\n z-index: 2;\n }\n\n .cta-urgency h3 {\n font-size: clamp(22px, 2.4vw, 32px);\n font-weight: 800;\n color: var(--white);\n line-height: 1.25;\n margin-bottom: 16px;\n position: relative;\n z-index: 2;\n }\n\n .cta-urgency p {\n font-size: 16px;\n color: rgba(240, 246, 252, 0.68);\n max-width: 640px;\n line-height: 1.75;\n margin-bottom: 32px;\n position: relative;\n z-index: 2;\n }\n\n .cta-urgency-btns {\n display: flex;\n gap: 14px;\n flex-wrap: wrap;\n position: relative;\n z-index: 2;\n }\n\n \/* \u2500\u2500\u2500 FORTGALE SUPPORT \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .support-grid {\n display: grid;\n grid-template-columns: repeat(3, 1fr);\n gap: 2px;\n margin-top: 52px;\n }\n\n .support-card {\n background: rgba(255, 255, 255, 0.03);\n border: 1px solid rgba(255, 255, 255, 0.07);\n padding: 40px 32px;\n position: relative;\n transition: background 0.3s;\n }\n\n .support-card:hover {\n background: rgba(255, 255, 255, 0.06);\n }\n\n .support-icon {\n font-size: 30px;\n margin-bottom: 18px;\n }\n\n .support-num {\n font-size: 48px;\n font-weight: 800;\n color: rgba(245, 200, 66, 0.1);\n line-height: 1;\n margin-bottom: 16px;\n letter-spacing: -0.04em;\n }\n\n .support-card h3 {\n font-size: 18px;\n font-weight: 700;\n color: var(--white);\n margin-bottom: 12px;\n line-height: 1.3;\n }\n\n .support-card p {\n font-size: 14px;\n color: rgba(240, 246, 252, 0.62);\n line-height: 1.75;\n }\n\n .support-line {\n position: absolute;\n top: 0;\n left: 0;\n width: 3px;\n height: 0;\n background: var(--amber-light);\n transition: height 0.4s ease;\n }\n\n .support-card:hover .support-line {\n height: 100%;\n }\n\n \/* \u2500\u2500\u2500 COMPLIANCE STRIP \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .compliance-strip {\n background: rgba(0, 27, 59, 0.04);\n border: 1px solid rgba(0, 27, 59, 0.08);\n border-radius: 12px;\n padding: 28px 36px;\n margin-top: 52px;\n display: flex;\n align-items: center;\n gap: 24px;\n flex-wrap: wrap;\n }\n\n .compliance-strip-label {\n font-size: 12px;\n font-weight: 700;\n color: var(--text-muted);\n letter-spacing: 0.08em;\n text-transform: uppercase;\n flex-shrink: 0;\n }\n\n .compliance-badges {\n display: flex;\n flex-wrap: wrap;\n gap: 10px;\n }\n\n .comp-badge {\n font-size: 12px;\n font-weight: 700;\n color: var(--navy-btn);\n background: rgba(48, 62, 122, 0.08);\n border: 1px solid rgba(48, 62, 122, 0.15);\n padding: 6px 16px;\n border-radius: 20px;\n letter-spacing: 0.04em;\n }\n\n \/* \u2500\u2500\u2500 PILLARS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .pillars {\n display: grid;\n grid-template-columns: repeat(3, 1fr);\n gap: 2px;\n margin-top: 56px;\n }\n\n .pillar {\n background: rgba(255, 255, 255, 0.03);\n border: 1px solid rgba(255, 255, 255, 0.07);\n padding: 44px 36px;\n position: relative;\n transition: background 0.3s;\n }\n\n .pillar:hover {\n background: rgba(255, 255, 255, 0.06);\n }\n\n .pillar-num {\n font-size: 56px;\n font-weight: 800;\n color: rgba(245, 200, 66, 0.12);\n line-height: 1;\n margin-bottom: 20px;\n letter-spacing: -0.04em;\n }\n\n .pillar h3 {\n font-size: 18px;\n font-weight: 700;\n color: var(--white);\n margin-bottom: 14px;\n line-height: 1.3;\n }\n\n .pillar p {\n font-size: 14px;\n color: rgba(240, 246, 252, 0.62);\n line-height: 1.75;\n }\n\n .pillar-line {\n position: absolute;\n top: 0;\n left: 0;\n width: 3px;\n height: 0;\n background: var(--amber-light);\n transition: height 0.4s ease;\n }\n\n .pillar:hover .pillar-line {\n height: 100%;\n }\n\n \/* \u2500\u2500\u2500 FAQ \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .faq-list {\n display: flex;\n flex-direction: column;\n gap: 0;\n margin-top: 52px;\n border: 1px solid rgba(255, 255, 255, 0.08);\n border-radius: 12px;\n overflow: hidden;\n }\n\n .faq-item {\n border-bottom: 1px solid rgba(255, 255, 255, 0.06);\n }\n\n .faq-item:last-child {\n border-bottom: none;\n }\n\n .faq-q {\n width: 100%;\n padding: 26px 32px;\n background: none;\n border: none;\n cursor: pointer;\n display: flex;\n justify-content: space-between;\n align-items: center;\n gap: 20px;\n font-family: 'Poppins', sans-serif;\n font-size: 16px;\n font-weight: 700;\n color: var(--white);\n text-align: left;\n transition: background 0.2s;\n }\n\n .faq-q:hover {\n background: rgba(255, 255, 255, 0.03);\n }\n\n .faq-q .faq-arrow {\n font-size: 20px;\n color: var(--amber-light);\n flex-shrink: 0;\n transition: transform 0.3s;\n }\n\n .faq-q.open .faq-arrow {\n transform: rotate(45deg);\n }\n\n .faq-a {\n max-height: 0;\n overflow: hidden;\n transition: max-height 0.4s ease, padding 0.3s;\n padding: 0 32px;\n }\n\n .faq-a-inner {\n padding-bottom: 26px;\n font-size: 15px;\n color: rgba(240, 246, 252, 0.68);\n line-height: 1.78;\n }\n\n .faq-a.open {\n max-height: 500px;\n }\n\n \/* \u2500\u2500\u2500 CTA FINALE \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .cta-section {\n background: linear-gradient(135deg, var(--navy-mid) 0%, #060f22 100%);\n padding: 96px 80px;\n text-align: center;\n position: relative;\n overflow: hidden;\n }\n\n .cta-section::before {\n content: '';\n position: absolute;\n inset: 0;\n background: radial-gradient(ellipse at 50% 50%, rgba(245, 200, 66, 0.07) 0%, transparent 65%);\n }\n\n .cta-section h2 {\n font-size: clamp(28px, 3vw, 42px);\n font-weight: 800;\n color: var(--white);\n margin-bottom: 18px;\n position: relative;\n z-index: 2;\n }\n\n .cta-section p {\n font-size: 17px;\n color: rgba(240, 246, 252, 0.68);\n max-width: 600px;\n margin: 0 auto 40px;\n line-height: 1.75;\n position: relative;\n z-index: 2;\n }\n\n .cta-btns {\n display: flex;\n justify-content: center;\n gap: 16px;\n flex-wrap: wrap;\n position: relative;\n z-index: 2;\n }\n\n \/* \u2500\u2500\u2500 RELATED \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .related-grid {\n display: grid;\n grid-template-columns: repeat(3, 1fr);\n gap: 20px;\n margin-top: 52px;\n }\n\n .related-card {\n background: rgba(255, 255, 255, 0.03);\n border: 1px solid rgba(255, 255, 255, 0.08);\n border-radius: 10px;\n padding: 32px 28px;\n transition: border-color 0.25s, background 0.25s;\n }\n\n .related-card:hover {\n border-color: rgba(245, 200, 66, 0.3);\n background: rgba(255, 255, 255, 0.05);\n }\n\n .related-icon {\n font-size: 28px;\n margin-bottom: 16px;\n }\n\n .related-title {\n font-size: 17px;\n font-weight: 800;\n color: var(--white);\n margin-bottom: 10px;\n }\n\n .related-desc {\n font-size: 13px;\n color: rgba(240, 246, 252, 0.58);\n line-height: 1.7;\n margin-bottom: 20px;\n }\n\n .related-link {\n font-size: 11px;\n font-weight: 700;\n letter-spacing: 0.12em;\n text-transform: uppercase;\n color: var(--amber-light);\n display: inline-flex;\n align-items: center;\n gap: 6px;\n transition: gap 0.2s;\n }\n\n .related-link:hover {\n gap: 10px;\n }\n\n \/* \u2500\u2500\u2500 RESPONSIVE \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n @media (max-width: 1100px) {\n .clock-panel {\n display: none;\n }\n .hero-content {\n max-width: 100%;\n }\n }\n\n @media (max-width: 1024px) {\n .section {\n padding: 72px 40px;\n }\n .hero-content {\n padding: 72px 40px 100px;\n }\n .hero-bottom {\n left: 40px;\n }\n .cta-section {\n padding: 72px 40px;\n }\n .timeline-cards {\n grid-template-columns: 1fr;\n }\n .sig-grid {\n grid-template-columns: 1fr;\n }\n .sanzioni-grid {\n grid-template-columns: 1fr;\n }\n .support-grid {\n grid-template-columns: repeat(2, 1fr);\n }\n .pillars {\n grid-template-columns: repeat(2, 1fr);\n }\n .related-grid {\n grid-template-columns: 1fr 1fr;\n }\n .notify-phase {\n grid-template-columns: 160px 1fr;\n }\n .cta-urgency {\n padding: 40px 36px;\n }\n }\n\n @media (max-width: 768px) {\n .section {\n padding: 56px 24px;\n }\n .hero-content {\n padding: 56px 24px 80px;\n }\n .hero-bottom {\n left: 24px;\n gap: 28px;\n bottom: 24px;\n }\n .cta-section {\n padding: 56px 24px;\n }\n .support-grid {\n grid-template-columns: 1fr;\n }\n .pillars {\n grid-template-columns: 1fr;\n }\n .related-grid {\n grid-template-columns: 1fr;\n }\n .notify-phase {\n grid-template-columns: 1fr;\n }\n .notify-phase-label {\n border-right: none;\n border-bottom: 1px solid rgba(0, 27, 59, 0.1);\n }\n .cta-urgency {\n padding: 32px 24px;\n }\n .hero-stat-value {\n font-size: 22px;\n }\n }\n <\/style>\n\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n HERO\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"hero\">\n\n <!-- Clock \/ Deadline Panel -->\n <div class=\"clock-panel\">\n <div class=\"clock-box\">\n <div class=\"clock-header\">\n <div class=\"clock-dot\"><\/div>\n <span class=\"clock-title\">Scadenze NIS2 \u2014 Incidente rilevato<\/span>\n <\/div>\n\n <div class=\"clock-event\">\n <div class=\"clock-event-header\">\n <span class=\"clock-event-label\">Early Warning al CSIRT Italia<\/span>\n <span class=\"clock-event-badge badge-red\">Critico<\/span>\n <\/div>\n <div class=\"clock-bar-track\">\n <div class=\"clock-bar-fill red\" style=\"width:100%; animation: bar-grow 1.2s ease-out;\"><\/div>\n <\/div>\n <div class=\"clock-sublabel\">\u23f1 Entro 24 ORE dalla scoperta<\/div>\n <\/div>\n\n <div class=\"clock-separator\"><\/div>\n\n <div class=\"clock-event\">\n <div class=\"clock-event-header\">\n <span class=\"clock-event-label\">Notifica Incidente Completa<\/span>\n <span class=\"clock-event-badge badge-orange\">Urgente<\/span>\n <\/div>\n <div class=\"clock-bar-track\">\n <div class=\"clock-bar-fill orange\" style=\"width:66%; animation: bar-grow 1.8s ease-out;\"><\/div>\n <\/div>\n <div class=\"clock-sublabel\">\u23f1 Entro 72 ORE dalla scoperta<\/div>\n <\/div>\n\n <div class=\"clock-separator\"><\/div>\n\n <div class=\"clock-event\">\n <div class=\"clock-event-header\">\n <span class=\"clock-event-label\">Report Finale e Analisi<\/span>\n <span class=\"clock-event-badge badge-amber\">Obbligatorio<\/span>\n <\/div>\n <div class=\"clock-bar-track\">\n <div class=\"clock-bar-fill amber\" style=\"width:20%; animation: bar-grow 2.4s ease-out;\"><\/div>\n <\/div>\n <div class=\"clock-sublabel\">\u23f1 Entro 30 GIORNI dalla scoperta<\/div>\n <\/div>\n\n <div class=\"clock-status\">\n <div class=\"clock-status-icon\">\u26a0\ufe0f<\/div>\n <div class=\"clock-status-text\">\n <strong>Hai bisogno di supporto?<\/strong> Fortgale IR Team operativo 24\/7 \u2014 affiancamento immediato\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n\n <div class=\"hero-content\">\n <div class=\"hero-tag\">NIS2 \u00b7 D.Lgs. 138\/2024<\/div>\n <h1>NIS2: entro quanto\n <br>tempo notificare\n <br>un incidente al\n <br><span>CSIRT Italia<\/span><\/h1>\n <p class=\"hero-subtitle\">La Direttiva NIS2, recepita in Italia con il D.Lgs. 138\/2024, impone scadenze stringenti per la notifica degli incidenti informatici significativi. Rispettarle non \u00e8 solo un obbligo di legge \u2014 \u00e8 la differenza tra una gestione controllata\n e una crisi fuori controllo.<\/p>\n <div class=\"hero-ctas\">\n <a href=\"https:\/\/fortgale.com\/it\/#contatti\" class=\"btn-red\">Supporto Incidente Attivo<\/a>\n <a href=\"#scadenze\" class=\"btn-secondary\">Le 3 scadenze NIS2 \u2193<\/a>\n <\/div>\n <\/div>\n\n <div class=\"hero-bottom\">\n <div>\n <div class=\"hero-stat-value red\">24h<\/div>\n <div class=\"hero-stat-label\">Early Warning<\/div>\n <\/div>\n <div>\n <div class=\"hero-stat-value accent\">72h<\/div>\n <div class=\"hero-stat-label\">Notifica completa<\/div>\n <\/div>\n <div>\n <div class=\"hero-stat-value accent\">30gg<\/div>\n <div class=\"hero-stat-label\">Report finale<\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n CTA URGENZA \u2014 INCIDENTE IN CORSO\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section\">\n <div class=\"section-narrow\">\n <div class=\"cta-urgency\">\n <div class=\"cta-urgency-eyebrow\">\u26a1 Incidente in corso?<\/div>\n <h3>Tre cose che devi fare adesso \u2014 prima che le scadenze scadano<\/h3>\n <p>Se hai rilevato un incidente informatico nelle ultime ore, il tempo \u00e8 la variabile critica. Fortgale supporta le aziende soggette a NIS2 nelle tre priorit\u00e0 immediate dell’Incident Response: confermare l’eradicazione degli attaccanti,\n gestire la notifica al CSIRT e prevenire nuovi attacchi.<\/p>\n <div class=\"cta-urgency-btns\">\n <a href=\"https:\/\/fortgale.com\/it\/#contatti\" class=\"btn-red\">Conferma che gli attaccanti siano stati rimossi<\/a>\n <a href=\"https:\/\/fortgale.com\/it\/#contatti\" class=\"btn-amber\">Supporto gestione incidente e notifica NIS2<\/a>\n <a href=\"https:\/\/fortgale.com\/it\/#contatti\" class=\"btn-secondary\">Proteggi la rete da nuovi attacchi<\/a>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n COME FORTGALE SUPPORTA\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section section-dark\" id=\"supporto-fortgale\">\n <div class=\"section-narrow\">\n <div class=\"section-tag section-tag-light\">Fortgale<\/div>\n <h2>Come Fortgale supporta la gestione dell’incidente NIS2<\/h2>\n <p class=\"section-lead\">Rispettare le scadenze NIS2 durante un incidente attivo richiede capacit\u00e0 tecniche e organizzative che non si improvvisano. Fortgale affianca le aziende nelle tre fasi critiche: risposta all’incidente, notifica normativa e prevenzione\n dei ritorni dell’attaccante.<\/p>\n\n <div class=\"support-grid\">\n <div class=\"support-card\">\n <div class=\"support-line\"><\/div>\n <div class=\"support-num\">01<\/div>\n <div class=\"support-icon\">\ud83d\udd0d<\/div>\n <h3>Conferma eradicazione degli attaccanti<\/h3>\n <p>Prima di tornare operativi, \u00e8 necessario certezza forense che gli attaccanti siano stati completamente rimossi dalla rete \u2014 endpoint, credenziali, persistence e backdoor incluse. Fortgale conduce l’analisi forense e la verifica\n di eradicazione con metodologia strutturata.<\/p>\n <\/div>\n <div class=\"support-card\">\n <div class=\"support-line\"><\/div>\n <div class=\"support-num\">02<\/div>\n <div class=\"support-icon\">\ud83d\udccb<\/div>\n <h3>Notifica NIS2 al CSIRT Italia<\/h3>\n <p>Raccogliamo gli IOC, la timeline dell’incidente e le informazioni richieste per la notifica delle 24 ore e delle 72 ore. Supportiamo la compilazione dei report sul portale CSIRT Italia e la redazione della relazione finale\n dei 30 giorni con root cause analysis inclusa.<\/p>\n <\/div>\n <div class=\"support-card\">\n <div class=\"support-line\"><\/div>\n <div class=\"support-num\">03<\/div>\n <div class=\"support-icon\">\ud83d\udee1\ufe0f<\/div>\n <h3>Prevenzione di nuovi attacchi<\/h3>\n <p>Gli attaccanti tornano. Dopo un incidente, l’infrastruttura compromessa \u00e8 un bersaglio noto. Il monitoraggio MDR post-incidente e il Feed di Intelligence proprietario Fortgale garantiscono visibilit\u00e0 immediata su eventuali\n tentativi di reintrusione e nuovi IOC correlati all’attaccante.<\/p>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n INTRO \/ CONTESTO\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section section-alt\" id=\"contesto\">\n <div class=\"section-narrow\">\n <div class=\"section-tag\">Il quadro normativo<\/div>\n <h2>La NIS2 e l’obbligo di notifica degli incidenti<\/h2>\n\n <div class=\"urgency-banner\">\n <div class=\"urgency-banner-icon\">\u26a0\ufe0f<\/div>\n <div class=\"urgency-banner-text\">\n <strong>Stai gestendo un incidente informatico in questo momento?<\/strong> Le scadenze NIS2 decorrono dal momento in cui l’organizzazione viene a conoscenza dell’incidente, non da quando viene confermato. Ogni ora conta. Contatta\n il team Fortgale per supporto immediato nella gestione dell’incidente e nella predisposizione della notifica al CSIRT Italia.\n <\/div>\n <\/div>\n\n <p style=\"font-size:16px; color:var(--text-body); line-height:1.8; max-width:840px; margin-bottom:24px;\">La Direttiva NIS2 (EU 2022\/2555), recepita in Italia con il <strong>Decreto Legislativo 4 settembre 2024, n. 138<\/strong>, ha introdotto obblighi di notifica degli incidenti informatici significativi per decine di migliaia di soggetti\n italiani \u2014 pubblici e privati \u2014 operanti in settori considerati critici per la sicurezza nazionale ed economica.<\/p>\n\n <p style=\"font-size:16px; color:var(--text-body); line-height:1.8; max-width:840px; margin-bottom:24px;\">Il punto di ricezione delle notifiche in Italia \u00e8 il <strong>CSIRT Italia<\/strong> (Computer Security Incident Response Team), operante in seno all’Agenzia per la Cybersicurezza Nazionale (ACN). Le notifiche devono essere trasmesse\n attraverso il portale dedicato e rispettare contenuti e tempistiche specifici per ciascuna fase.<\/p>\n\n <p style=\"font-size:16px; color:var(--text-body); line-height:1.8; max-width:840px;\">Non rispettare le scadenze \u2014 o non notificare un incidente che doveva essere notificato \u2014 espone l’organizzazione a <strong>sanzioni fino a 10 milioni di euro o al 2% del fatturato globale<\/strong>, oltre a potenziali misure cautelari\n e responsabilit\u00e0 personali per i dirigenti.<\/p>\n\n <div class=\"compliance-strip\">\n <span class=\"compliance-strip-label\">Soggetti obbligati<\/span>\n <div class=\"compliance-badges\">\n <span class=\"comp-badge\">Soggetti Essenziali (SE)<\/span>\n <span class=\"comp-badge\">Soggetti Importanti (SI)<\/span>\n <span class=\"comp-badge\">Energia<\/span>\n <span class=\"comp-badge\">Trasporti<\/span>\n <span class=\"comp-badge\">Banche e Finanza<\/span>\n <span class=\"comp-badge\">Sanit\u00e0<\/span>\n <span class=\"comp-badge\">Infrastrutture Digitali<\/span>\n <span class=\"comp-badge\">PA<\/span>\n <span class=\"comp-badge\">Manifatturiero<\/span>\n <span class=\"comp-badge\">Rifiuti<\/span>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n LE 3 SCADENZE\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section\" id=\"scadenze\">\n <div class=\"section-narrow\">\n <div class=\"section-tag\">Le tempistiche<\/div>\n <h2>Le 3 scadenze per la notifica al CSIRT Italia<\/h2>\n <p class=\"section-lead\">NIS2 articola l’obbligo di notifica in tre fasi progressive. Ogni fase ha contenuti specifici e tempi perentori. Il <em>dies a quo<\/em> \u2014 il giorno zero \u2014 decorre dal momento in cui l’organizzazione viene a conoscenza dell’incidente\n significativo.<\/p>\n\n <div class=\"timeline-cards\">\n\n <!-- 24 ORE -->\n <div class=\"tcard t-red\">\n <div class=\"tcard-num\">24<\/div>\n <div class=\"tcard-unit\">ore \u2014 Early Warning<\/div>\n <div class=\"tcard-type\">Segnalazione preliminare urgente<\/div>\n <div class=\"tcard-desc\">La prima notifica \u00e8 una segnalazione rapida che serve al CSIRT per avere contezza immediata dell’incidente. Non \u00e8 richiesta un’analisi completa, ma le informazioni essenziali devono essere trasmesse entro 24 ore dalla scoperta.<\/div>\n <div class=\"tcard-must\">Contenuto minimo richiesto:<\/div>\n <ul class=\"tcard-items\">\n <li>Indicazione che si \u00e8 verificato un incidente significativo<\/li>\n <li>Se l’incidente \u00e8 sospettato di essere doloso (attacco)<\/li>\n <li>Se ha impatto transfrontaliero su altri Stati UE<\/li>\n <li>Classificazione iniziale del tipo di incidente<\/li>\n <\/ul>\n <div class=\"tcard-footer\">\u23f1 Scadenza perentoria \u2014 Nessuna deroga<\/div>\n <\/div>\n\n <!-- 72 ORE -->\n <div class=\"tcard t-orange\">\n <div class=\"tcard-num\">72<\/div>\n <div class=\"tcard-unit\">ore \u2014 Notifica Incidente<\/div>\n <div class=\"tcard-type\">Notifica completa dell’incidente<\/div>\n <div class=\"tcard-desc\">Entro 72 ore deve essere trasmessa la notifica completa dell’incidente, comprensiva di analisi tecnica, impatto stimato e misure di contenimento adottate. \u00c8 la notifica principale ai fini del rispetto degli obblighi NIS2.<\/div>\n <div class=\"tcard-must\">Contenuto richiesto:<\/div>\n <ul class=\"tcard-items\">\n <li>Classificazione e gravit\u00e0 dell’incidente<\/li>\n <li>Cause iniziali identificate (se note)<\/li>\n <li>Indicatori di compromissione (IOC) disponibili<\/li>\n <li>Sistemi, reti e dati coinvolti<\/li>\n <li>Numero di utenti o servizi impattati<\/li>\n <li>Misure di contenimento e mitigazione adottate<\/li>\n <li>Impatto su altri soggetti o infrastrutture<\/li>\n <\/ul>\n <div class=\"tcard-footer\">\u23f1 Aggiorna la notifica delle 24h se gi\u00e0 inviata<\/div>\n <\/div>\n\n <!-- 30 GIORNI -->\n <div class=\"tcard t-amber\">\n <div class=\"tcard-num\">30<\/div>\n <div class=\"tcard-unit\">giorni \u2014 Report Finale<\/div>\n <div class=\"tcard-type\">Relazione finale e analisi<\/div>\n <div class=\"tcard-desc\">Entro un mese dall’incidente, l’organizzazione deve trasmettere la relazione finale completa, che include l’analisi delle cause profonde, le misure correttive implementate e le lezioni apprese. \u00c8 il documento che chiude formalmente\n la notifica.<\/div>\n <div class=\"tcard-must\">Contenuto richiesto:<\/div>\n <ul class=\"tcard-items\">\n <li>Descrizione dettagliata dell’incidente e della sua evoluzione<\/li>\n <li>Analisi delle cause radice (root cause analysis)<\/li>\n <li>Impatto effettivo \u2014 economico, operativo, reputazionale<\/li>\n <li>Misure correttive e di remediation implementate<\/li>\n <li>Misure preventive adottate contro futuri attacchi<\/li>\n <li>Eventuali responsabilit\u00e0 di terzi nella supply chain<\/li>\n <\/ul>\n <div class=\"tcard-footer\">\u23f1 Se l’incidente dura oltre 30 giorni: relazione intermedia<\/div>\n <\/div>\n\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n COS'\u00c8 UN INCIDENTE SIGNIFICATIVO\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section section-dark\" id=\"incidente-significativo\">\n <div class=\"section-narrow\">\n <div class=\"section-tag section-tag-amber\">Perimetro di obbligo<\/div>\n <h2>Cos’\u00e8 un incidente “significativo” secondo NIS2<\/h2>\n <p class=\"section-lead\">Non tutti gli incidenti informatici devono essere notificati al CSIRT Italia. L’obbligo scatta solo per gli incidenti che superano determinate soglie di impatto \u2014 definite come “significativi” dalla normativa. Valutare correttamente\n questa soglia \u00e8 critico: notificare il giusto al momento giusto.<\/p>\n\n <div class=\"sig-grid\">\n <div class=\"sig-card\">\n <div class=\"sig-icon\">\ud83c\udfed<\/div>\n <div class=\"sig-title\">Grave perturbazione operativa<\/div>\n <div class=\"sig-desc\">L’incidente causa o pu\u00f2 causare un’interruzione significativa della fornitura del servizio: sistemi core non disponibili, processi produttivi bloccati, accesso ai dati impedito. La soglia tiene conto della durata, dell’ampiezza\n e della criticit\u00e0 dei servizi impattati.<\/div>\n <div class=\"sig-ex\">\u2192 Server ERP bloccato per 6+ ore\n <br>\u2192 Accesso ai sistemi critici compromesso\n <br>\u2192 Servizi pubblici interrotti<\/div>\n <\/div>\n <div class=\"sig-card\">\n <div class=\"sig-icon\">\ud83d\udcb6<\/div>\n <div class=\"sig-title\">Perdite finanziarie rilevanti<\/div>\n <div class=\"sig-desc\">L’incidente determina perdite finanziarie dirette significative per l’organizzazione: costi di ripristino, perdita di fatturato, pagamenti a terzi. I criteri quantitativi specifici saranno definiti da ACN per settore.<\/div>\n <div class=\"sig-ex\">\u2192 Ransomware con richiesta di riscatto\n <br>\u2192 Frode tramite BEC (Business Email Compromise)\n <br>\u2192 Furto di dati con valore commerciale<\/div>\n <\/div>\n <div class=\"sig-card\">\n <div class=\"sig-icon\">\ud83d\udc65<\/div>\n <div class=\"sig-title\">Danni a persone fisiche o terzi<\/div>\n <div class=\"sig-desc\">L’incidente causa o rischia di causare danni a persone fisiche (es. violazione di dati sanitari) o a soggetti terzi (clienti, fornitori, partner). Include la violazione di dati personali con obbligo parallelo di notifica al\n Garante Privacy (GDPR art. 33).<\/div>\n <div class=\"sig-ex\">\u2192 Data breach con dati personali esfiltrati\n <br>\u2192 Compromissione dati sanitari dei pazienti\n <br>\u2192 Attacco a sistema che gestisce infrastrutture terze<\/div>\n <\/div>\n <div class=\"sig-card\">\n <div class=\"sig-icon\">\ud83c\udf10<\/div>\n <div class=\"sig-title\">Impatto transfrontaliero<\/div>\n <div class=\"sig-desc\">L’incidente ha effetti o potenziali effetti su soggetti o servizi in altri Stati Membri dell’UE. In questo caso la notifica al CSIRT Italia si accompagna a una comunicazione verso i CSIRT degli altri Paesi coinvolti attraverso\n la rete EU-CERT.<\/div>\n <div class=\"sig-ex\">\u2192 Attacco a infrastruttura con nodi in pi\u00f9 Paesi UE\n <br>\u2192 Propagazione malware a partner europei\n <br>\u2192 Servizi SaaS con utenti transfrontalieri<\/div>\n <\/div>\n <\/div>\n\n <div style=\"margin-top:40px; background:rgba(255,255,255,0.03); border:1px solid rgba(255,255,255,0.08); border-radius:12px; padding:28px 32px;\">\n <p style=\"font-size:15px; color:rgba(240,246,252,0.75); line-height:1.78;\"><strong style=\"color:var(--amber-light);\">Regola pratica:<\/strong> in caso di dubbio sulla significativit\u00e0 dell’incidente, <strong style=\"color:var(--white);\">notificare \u00e8 sempre la scelta sicura<\/strong>. La mancata notifica\n di un incidente che avrebbe dovuto essere notificato \u00e8 sanzionata; una notifica considerata non necessaria non comporta sanzioni. Nei casi incerti, contatta il CSIRT anche in via informale per una valutazione preliminare.<\/p>\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n COSA NOTIFICARE \u2014 TABELLA FASI\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section\" id=\"cosa-notificare\">\n <div class=\"section-narrow\">\n <div class=\"section-tag\">Contenuto delle notifiche<\/div>\n <h2>Cosa deve contenere ogni notifica<\/h2>\n <p class=\"section-lead\">La qualit\u00e0 delle informazioni trasmesse \u00e8 determinante sia per il rispetto degli obblighi NIS2, sia per ricevere supporto tempestivo dal CSIRT Italia. Ecco il dettaglio dei campi richiesti in ciascuna fase.<\/p>\n\n <div class=\"notify-phases\">\n\n <div class=\"notify-phase ph-red\">\n <div class=\"notify-phase-label ph-red\">\n <div class=\"notify-phase-time\">24h<\/div>\n <div class=\"notify-phase-unit\">Ore<\/div>\n <div class=\"notify-phase-name\">Early Warning<\/div>\n <\/div>\n <div class=\"notify-phase-body\">\n <div class=\"notify-field-list\">\n <div class=\"notify-field ph-red\">\n <div class=\"notify-field-dot ph-red\">!<\/div>\n Conferma che si \u00e8 verificato un incidente informatico significativo (o fortemente sospettato tale)\n <\/div>\n <div class=\"notify-field ph-red\">\n <div class=\"notify-field-dot ph-red\">!<\/div>\n Indicazione se l’incidente \u00e8 sospettato essere di natura dolosa (attacco informatico) o accidentale\n <\/div>\n <div class=\"notify-field ph-red\">\n <div class=\"notify-field-dot ph-red\">!<\/div>\n Se l’incidente ha o potrebbe avere impatto transfrontaliero su altri Stati Membri UE\n <\/div>\n <div class=\"notify-field ph-red\">\n <div class=\"notify-field-dot ph-red\">!<\/div>\n Classificazione preliminare della tipologia di incidente (ransomware, data breach, DDoS, supply chain\u2026)\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n\n <div class=\"notify-phase ph-orange\">\n <div class=\"notify-phase-label ph-orange\">\n <div class=\"notify-phase-time\">72h<\/div>\n <div class=\"notify-phase-unit\">Ore<\/div>\n <div class=\"notify-phase-name\">Notifica Completa<\/div>\n <\/div>\n <div class=\"notify-phase-body\">\n <div class=\"notify-field-list\">\n <div class=\"notify-field ph-orange\">\n <div class=\"notify-field-dot ph-orange\">\u25b8<\/div>\n Descrizione dettagliata dell’incidente: timeline, vettore di attacco, sistemi coinvolti\n <\/div>\n <div class=\"notify-field ph-orange\">\n <div class=\"notify-field-dot ph-orange\">\u25b8<\/div>\n Classificazione della gravit\u00e0 e impatto stimato (operativo, economico, reputazionale)\n <\/div>\n <div class=\"notify-field ph-orange\">\n <div class=\"notify-field-dot ph-orange\">\u25b8<\/div>\n Cause iniziali identificate o fortemente sospettate\n <\/div>\n <div class=\"notify-field ph-orange\">\n <div class=\"notify-field-dot ph-orange\">\u25b8<\/div>\n Indicatori di compromissione (IOC) disponibili: IP, domini, hash, URL malevoli\n <\/div>\n <div class=\"notify-field ph-orange\">\n <div class=\"notify-field-dot ph-orange\">\u25b8<\/div>\n Numero di utenti, clienti o servizi impattati; durata dell’interruzione\n <\/div>\n <div class=\"notify-field ph-orange\">\n <div class=\"notify-field-dot ph-orange\">\u25b8<\/div>\n Misure di contenimento gi\u00e0 adottate e stato del ripristino\n <\/div>\n <div class=\"notify-field ph-orange\">\n <div class=\"notify-field-dot ph-orange\">\u25b8<\/div>\n Eventuali implicazioni su soggetti terzi o sulla catena di fornitura\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n\n <div class=\"notify-phase ph-amber\">\n <div class=\"notify-phase-label ph-amber\">\n <div class=\"notify-phase-time\">30gg<\/div>\n <div class=\"notify-phase-unit\">Giorni<\/div>\n <div class=\"notify-phase-name\">Report Finale<\/div>\n <\/div>\n <div class=\"notify-phase-body\">\n <div class=\"notify-field-list\">\n <div class=\"notify-field ph-amber\">\n <div class=\"notify-field-dot ph-amber\">\u25c6<\/div>\n Descrizione completa e definitiva dell’incidente nella sua interezza\n <\/div>\n <div class=\"notify-field ph-amber\">\n <div class=\"notify-field-dot ph-amber\">\u25c6<\/div>\n Root cause analysis: le cause profonde che hanno reso possibile l’incidente\n <\/div>\n <div class=\"notify-field ph-amber\">\n <div class=\"notify-field-dot ph-amber\">\u25c6<\/div>\n Impatto effettivo \u2014 definitivo e quantificato \u2014 su operativit\u00e0, dati e terzi\n <\/div>\n <div class=\"notify-field ph-amber\">\n <div class=\"notify-field-dot ph-amber\">\u25c6<\/div>\n Misure di remediation implementate per eliminare la compromissione\n <\/div>\n <div class=\"notify-field ph-amber\">\n <div class=\"notify-field-dot ph-amber\">\u25c6<\/div>\n Misure preventive adottate per impedire il ripetersi dell’incidente\n <\/div>\n <div class=\"notify-field ph-amber\">\n <div class=\"notify-field-dot ph-amber\">\u25c6<\/div>\n Analisi forense disponibile e documentazione tecnica allegata\n <\/div>\n <div class=\"notify-field ph-amber\">\n <div class=\"notify-field-dot ph-amber\">\u25c6<\/div>\n Aggiornamento su eventuali coinvolgimenti di terzi nella supply chain\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n SANZIONI\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section section-alt\" id=\"sanzioni\">\n <div class=\"section-narrow\">\n <div class=\"section-tag\">Conseguenze<\/div>\n <h2>Le sanzioni per mancata o tardiva notifica<\/h2>\n <p class=\"section-lead\">Il D.Lgs. 138\/2024 prevede sanzioni amministrative significative per i soggetti che non rispettano gli obblighi di notifica NIS2. Le sanzioni si applicano in modo differenziato tra soggetti essenziali e soggetti importanti.<\/p>\n\n <div class=\"sanzioni-grid\">\n <div class=\"sanzione-card\">\n <div class=\"sanzione-type\">Soggetti Essenziali (SE)<\/div>\n <div class=\"sanzione-amount\">\u20ac 10.000.000<\/div>\n <div class=\"sanzione-or\">oppure, se superiore:<\/div>\n <div class=\"sanzione-pct\">2% del fatturato annuo globale<\/div>\n <div class=\"sanzione-desc\">Applicabile a organizzazioni operanti nei settori ad alta criticit\u00e0: energia, trasporti, banche, infrastrutture dei mercati finanziari, sanit\u00e0, acqua potabile, acque reflue, infrastrutture digitali, gestione dei servizi ICT,\n pubblica amministrazione, spazio.<\/div>\n <div class=\"sanzione-extra\">\n <strong>Sanzioni accessorie:<\/strong> diffida pubblica, limitazione temporanea delle attivit\u00e0, sospensione delle certificazioni, misure cautelari sull’operativit\u00e0 del soggetto.\n <\/div>\n <\/div>\n <div class=\"sanzione-card\">\n <div class=\"sanzione-type\">Soggetti Importanti (SI)<\/div>\n <div class=\"sanzione-amount\">\u20ac 7.000.000<\/div>\n <div class=\"sanzione-or\">oppure, se superiore:<\/div>\n <div class=\"sanzione-pct\">1,4% del fatturato annuo globale<\/div>\n <div class=\"sanzione-desc\">Applicabile a organizzazioni operanti nei settori a criticit\u00e0 significativa: servizi postali, gestione dei rifiuti, produzione e distribuzione di prodotti chimici, produzione di alimenti, industria manifatturiera, fornitori\n di servizi digitali, ricerca.<\/div>\n <div class=\"sanzione-extra\">\n <strong>Responsabilit\u00e0 personale:<\/strong> i dirigenti responsabili della funzione di sicurezza possono essere soggetti a sanzioni personali e temporanea interdizione dai ruoli direttivi.\n <\/div>\n <\/div>\n <\/div>\n\n <div style=\"margin-top:32px; background:rgba(192,57,43,0.05); border:1px solid rgba(192,57,43,0.15); border-radius:12px; padding:28px 32px;\">\n <p style=\"font-size:15px; color:var(--text-body); line-height:1.78;\"><strong style=\"color:#c0392b;\">Nota importante:<\/strong> le sanzioni NIS2 si aggiungono \u2014 e non sostituiscono \u2014 le eventuali sanzioni GDPR per violazione dei dati personali (fino al 4% del fatturato globale), le responsabilit\u00e0\n civili verso i soggetti danneggiati dall’incidente, e le conseguenze penali in caso di dolo o grave negligenza. Una corretta gestione della notifica \u00e8 il primo atto di tutela legale dell’organizzazione.<\/p>\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n PILASTRI PREVENTIVI\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section section-ink\">\n <div class=\"section-narrow\">\n <div class=\"section-tag section-tag-light\">Prima che accada<\/div>\n <h2 style=\"color:var(--white);\">Come prepararsi alla NIS2 prima di un incidente<\/h2>\n <p class=\"section-lead\">La gestione di un incidente NIS2 non si improvvisa. Le organizzazioni che rispondono efficacemente hanno gi\u00e0 strutturato, in anticipo, i processi e le capacit\u00e0 che rendono possibile una risposta nei tempi normativi.<\/p>\n\n <div class=\"pillars\">\n <div class=\"pillar\">\n <div class=\"pillar-line\"><\/div>\n <div class=\"pillar-num\">01<\/div>\n <h3>Piano di Incident Response NIS2<\/h3>\n <p>Un playbook specifico che definisce chi notifica al CSIRT, chi raccoglie gli IOC, chi prepara la documentazione e chi coordina con legale e DPO. Senza questo piano, in un incidente reale si perde tempo prezioso nelle prime\n ore critiche.<\/p>\n <\/div>\n <div class=\"pillar\">\n <div class=\"pillar-line\"><\/div>\n <div class=\"pillar-num\">02<\/div>\n <h3>Monitoraggio e rilevazione 24\/7<\/h3>\n <p>Non puoi notificare un incidente in 24 ore se lo scopri dopo una settimana. Il rilevamento tempestivo \u00e8 la precondizione di ogni obbligo NIS2. MDR e SIEM con detection avanzata riducono il tempo medio di scoperta da mesi a\n ore.<\/p>\n <\/div>\n <div class=\"pillar\">\n <div class=\"pillar-line\"><\/div>\n <div class=\"pillar-num\">03<\/div>\n <h3>Registrazione e log retention<\/h3>\n <p>La notifica al CSIRT richiede log, IOC e timeline. Senza log adeguati \u2014 firewall, endpoint, autenticazione, email \u2014 \u00e8 impossibile ricostruire la catena d’attacco nei tempi previsti. La log policy \u00e8 il prerequisito tecnico della\n compliance NIS2.<\/p>\n <\/div>\n <div class=\"pillar\">\n <div class=\"pillar-line\"><\/div>\n <div class=\"pillar-num\">04<\/div>\n <h3>Classificazione preventiva degli asset<\/h3>\n <p>Sapere in anticipo quali sistemi sono critici accelera la valutazione della significativit\u00e0 dell’incidente. Avere un inventario aggiornato di asset, dati e servizi essenziali permette di rispondere rapidamente alla domanda\n “\u00e8 un incidente NIS2 notificabile?”<\/p>\n <\/div>\n <div class=\"pillar\">\n <div class=\"pillar-line\"><\/div>\n <div class=\"pillar-num\">05<\/div>\n <h3>Contatti CSIRT e canali dedicati<\/h3>\n <p>Registrare preventivamente l’organizzazione sul portale CSIRT Italia, testare i canali di notifica e formare il personale responsabile riduce il rischio di errori procedurali nel momento di massima pressione operativa \u2014 durante\n un incidente attivo.<\/p>\n <\/div>\n <div class=\"pillar\">\n <div class=\"pillar-line\"><\/div>\n <div class=\"pillar-num\">06<\/div>\n <h3>Esercitazioni e tabletop NIS2<\/h3>\n <p>Simulare scenari di incidente in un ambiente controllato \u2014 ransomware, data breach, supply chain attack \u2014 permette di testare il piano di IR, individuare i gap procedurali e formare il team prima che la situazione reale renda\n ogni errore costoso.<\/p>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n SERVIZI CORRELATI\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section section-dark\">\n <div class=\"section-narrow\">\n <div class=\"section-tag section-tag-amber\">Servizi Fortgale<\/div>\n <h2>I servizi che rendono possibile la conformit\u00e0 NIS2<\/h2>\n <p class=\"section-lead\">Dalla prevenzione al post-incidente, Fortgale offre le capacit\u00e0 operative necessarie per rispettare gli obblighi NIS2 e ridurre il rischio di incidenti notificabili.<\/p>\n\n <div class=\"related-grid\">\n <div class=\"related-card\">\n <div class=\"related-icon\">\ud83d\udd2d<\/div>\n <div class=\"related-title\">MDR \u2014 Managed Detection & Response<\/div>\n <div class=\"related-desc\">Monitoraggio 24\/7 che riduce il tempo di rilevazione da settimane a ore \u2014 precondizione di ogni obbligo di notifica NIS2. Alert reali, non rumore.<\/div>\n <a href=\"https:\/\/fortgale.com\/it\/managed-detection-and-response\/\" class=\"related-link\">Scopri MDR \u2192<\/a>\n <\/div>\n <div class=\"related-card\">\n <div class=\"related-icon\">\ud83e\udde0<\/div>\n <div class=\"related-title\">Cyber Threat Intelligence<\/div>\n <div class=\"related-desc\">IOC proprietari e threat actor tracking che alimentano la risposta agli incidenti con contesto operativo immediato \u2014 utili alla notifica CSIRT e al report finale.<\/div>\n <a href=\"https:\/\/fortgale.com\/it\/cyber-threat-intelligence\/\" class=\"related-link\">Scopri CTI \u2192<\/a>\n <\/div>\n <div class=\"related-card\">\n <div class=\"related-icon\">\ud83e\udeaa<\/div>\n <div class=\"related-title\">ITDR \u2014 Identity Threat Detection<\/div>\n <div class=\"related-desc\">Il 80% degli incidenti NIS2 notificabili coinvolge identit\u00e0 compromesse. ITDR rileva in tempo reale gli attacchi all’Active Directory e alle identit\u00e0 cloud.<\/div>\n <a href=\"https:\/\/fortgale.com\/it\/protezione-identita\/\" class=\"related-link\">Scopri ITDR \u2192<\/a>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n FAQ\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section section-dark\" id=\"faq\">\n <div class=\"section-narrow\">\n <div class=\"section-tag section-tag-amber\">FAQ<\/div>\n <h2>Domande frequenti sulla notifica NIS2 al CSIRT Italia<\/h2>\n <p class=\"section-lead\">Le domande pi\u00f9 comuni che riceviamo dalle aziende durante e prima di un incidente informatico soggetto a NIS2.<\/p>\n\n <div class=\"faq-list\">\n <div class=\"faq-item\">\n <button class=\"faq-q\" onclick=\"toggleFaq(this)\">\n Cos’\u00e8 un incidente significativo ai sensi della NIS2?\n <span class=\"faq-arrow\">+<\/span>\n <\/button>\n <div class=\"faq-a\">\n <div class=\"faq-a-inner\">Un incidente \u00e8 considerato significativo quando causa o pu\u00f2 causare una grave perturbazione operativa, perdite finanziarie rilevanti, o danni significativi a persone fisiche o giuridiche terze. I parametri includono: numero\n di utenti colpiti, durata dell’interruzione, impatto geografico e criticit\u00e0 del servizio interrotto. In caso di dubbio, la norma suggerisce di notificare \u2014 la mancata notifica \u00e8 sanzionata, la notifica non necessaria no.<\/div>\n <\/div>\n <\/div>\n <div class=\"faq-item\">\n <button class=\"faq-q\" onclick=\"toggleFaq(this)\">\n Cosa succede se non si notifica entro le 24 ore?\n <span class=\"faq-arrow\">+<\/span>\n <\/button>\n <div class=\"faq-a\">\n <div class=\"faq-a-inner\">La mancata o tardiva notifica espone il soggetto a sanzioni fino a 10 milioni di euro o il 2% del fatturato annuo globale per i soggetti essenziali, e fino a 7 milioni di euro o l’1,4% per i soggetti importanti. L’ACN pu\u00f2\n disporre misure cautelari e limitazione temporanea delle attivit\u00e0. I dirigenti responsabili possono essere soggetti a sanzioni personali e temporanea interdizione dai ruoli direttivi.<\/div>\n <\/div>\n <\/div>\n <div class=\"faq-item\">\n <button class=\"faq-q\" onclick=\"toggleFaq(this)\">\n La notifica al CSIRT protegge l’azienda da responsabilit\u00e0 legali?\n <span class=\"faq-arrow\">+<\/span>\n <\/button>\n <div class=\"faq-a\">\n <div class=\"faq-a-inner\">La notifica \u00e8 un obbligo di legge, non una protezione automatica. Notificare correttamente e nei tempi previsti dimostra la conformit\u00e0 agli obblighi NIS2 e pu\u00f2 attenuare le sanzioni. Non notificare, al contrario, aggrava\n la posizione legale dell’azienda sia sul piano amministrativo che in eventuali contenziosi civili con soggetti danneggiati. Nei casi in cui l’incidente coinvolge dati personali, la notifica al CSIRT si affianca \u2014 senza\n sostituirsi \u2014 alla notifica al Garante Privacy prevista dal GDPR (art. 33, entro 72 ore).<\/div>\n <\/div>\n <\/div>\n <div class=\"faq-item\">\n <button class=\"faq-q\" onclick=\"toggleFaq(this)\">\n Quali informazioni servono per la notifica di 72 ore?\n <span class=\"faq-arrow\">+<\/span>\n <\/button>\n <div class=\"faq-a\">\n <div class=\"faq-a-inner\">La notifica delle 72 ore deve includere: classificazione e gravit\u00e0 dell’incidente, cause iniziali identificate (se note), indicatori di compromissione (IOC), sistemi e dati coinvolti, misure di contenimento adottate, numero\n di utenti o servizi impattati, e impatto transfrontaliero se applicabile. Avere un team tecnico che supporta la raccolta di queste informazioni in parallelo alla risposta operativa \u00e8 fondamentale per rispettare la scadenza\n senza compromettere la gestione dell’incidente.<\/div>\n <\/div>\n <\/div>\n <div class=\"faq-item\">\n <button class=\"faq-q\" onclick=\"toggleFaq(this)\">\n Le PMI sono soggette agli obblighi di notifica NIS2?\n <span class=\"faq-arrow\">+<\/span>\n <\/button>\n <div class=\"faq-a\">\n <div class=\"faq-a-inner\">Le PMI con meno di 50 dipendenti e meno di 10 milioni di euro di fatturato sono generalmente escluse dalla NIS2, salvo operino in settori ad alta criticit\u00e0 o siano identificate come soggetti critici da ACN indipendentemente\n dalla dimensione. Le medie imprese (50\u2013249 dipendenti, 10\u201350M\u20ac fatturato) rientrano nella categoria dei soggetti importanti. Per verificare se la tua organizzazione \u00e8 soggetta agli obblighi NIS2, \u00e8 necessario un’analisi\n del settore di attivit\u00e0 e delle dimensioni aziendali rispetto ai criteri del D.Lgs. 138\/2024.<\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n CTA FINALE\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"cta-section\">\n <h2>Gestisci un incidente o vuoi prepararti prima?<\/h2>\n <p>Che si tratti di un incidente attivo da notificare al CSIRT Italia o di una preparazione preventiva agli obblighi NIS2, il team Fortgale \u00e8 a disposizione. Risposta immediata, supporto tecnico e legale coordinato.<\/p>\n <div class=\"cta-btns\">\n <a href=\"https:\/\/fortgale.com\/it\/#contatti\" class=\"btn-red\">Supporto Incidente Attivo<\/a>\n <a href=\"https:\/\/fortgale.com\/it\/#contatti\" class=\"btn-amber-solid\">Valutazione NIS2 Preventiva<\/a>\n <a href=\"https:\/\/fortgale.com\/it\/zero-trust\/\" class=\"btn-secondary\">Scopri Zero Trust \u2192<\/a>\n <\/div>\n <\/section>\n\n\n <script>\n \/\/ \u2500\u2500 FAQ toggle \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n function toggleFaq(btn) {\n const answer = btn.nextElementSibling;\n const isOpen = answer.classList.contains('open');\n document.querySelectorAll('.faq-a').forEach(a => a.classList.remove('open'));\n document.querySelectorAll('.faq-q').forEach(b => b.classList.remove('open'));\n if (!isOpen) {\n answer.classList.add('open');\n btn.classList.add('open');\n }\n }\n\n \/\/ \u2500\u2500 Bar fill animate on load \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n window.addEventListener('load', () => {\n document.querySelectorAll('.clock-bar-fill').forEach(bar => {\n const target = bar.style.width;\n bar.style.width = '0';\n setTimeout(() => {\n bar.style.transition = 'width 1.4s ease-out';\n bar.style.width = target;\n }, 600);\n });\n });\n <\/script>\n\n\n\n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>NIS2: Entro Quanto Tempo Notificare un Incidente al CSIRT Italia | Fortgale Scadenze NIS2 \u2014 Incidente rilevato Early Warning al CSIRT Italia Critico \u23f1 Entro 24 ORE dalla scoperta Notifica Incidente Completa Urgente \u23f1 Entro 72 ORE dalla scoperta Report Finale e Analisi Obbligatorio \u23f1 Entro 30 GIORNI dalla scoperta \u26a0\ufe0f Hai bisogno di supporto? […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"page-templates\/full-width-page.php","meta":{"footnotes":""},"class_list":["post-13906","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/pages\/13906","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/comments?post=13906"}],"version-history":[{"count":2,"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/pages\/13906\/revisions"}],"predecessor-version":[{"id":13910,"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/pages\/13906\/revisions\/13910"}],"wp:attachment":[{"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/media?parent=13906"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}