MMultimediaFrom Lecce, across Italy

MMultimedia / Services / Security and NIS2

Security and NIS2

First we see where you're exposed, then we close the gaps

We protect businesses' computers, networks, email and data, without scaremongering or selling fear. And we help those required to comply with NIS2, and those who work as their suppliers, get there. Across Italy, remotely every day and on site when needed.

The problem

In the words we hear on the phone

What we do

A few things, done well, checked over time

Security check-up, free of charge

We go through your computers, network, email, access and data backups with you. We tell you in plain language where you're exposed and what's best to fix first, in order of importance. No hundred-page reports.

Firewall and protected network

Fortinet and MikroTik firewalls configured for your business, a network divided into zones, remote access only via VPN. If needed, we block unknown devices that connect to the network.

Managed antivirus and updates

Antivirus on every computer, monitored by us and not left to its own devices. System and software updates, because most attacks exploit flaws that have already been fixed.

Access and identity

Two-step verification on email and cloud services, Microsoft 365 or Google Workspace. Personal accounts instead of shared ones, closed when someone leaves.

People and data backups

Short briefings for staff on recognising scam emails. And data backups, including off-site, that are genuinely tested: if something goes wrong, that's where you restart from.

NIS2

NIS2, in simple terms

NIS2 is the European directive on cybersecurity. In Italy it became law with Legislative Decree 138/2024, and it's overseen by the Agenzia per la Cybersicurezza Nazionale (ACN, the Italian National Cybersecurity Agency). It requires companies in sectors deemed important to manage IT risks, have specific security measures in place and report serious incidents.

We're already helping several clients comply with NIS2. It affects you in one of these two ways:

Your company is on the NIS list

You've received the ACN notification on its platform. You must apply the basic security measures within the stated deadlines and report significant incidents. Responsibility also lies with the company's directors.

You work for a company that is on the list

You're not directly obliged, but your client has to check its suppliers' security: questionnaires, contract clauses and requests for evidence start arriving. This is the most common case.

The dates that matter

  • 16 October 2024Legislative Decree 138/2024 comes into force
  • Early 2025registration of entities on the ACN platform, then updated every year
  • From January 2026incident reporting for those listed in 2025: early warning within 24 hours, notification within 72 hours
  • 18 months from notificationbasic security measures for those listed in 2025: the deadlines fall in these months
  • 31 July 2027basic measures for those listed for the first time in 2026

Source: ACN, pages on NIS. Checked on 24/10/2026: dates may change with new determinations.

How we support you on NIS2

  1. We work out your position together: NIS entity, supplier to a NIS entity, or neither.
  2. We compare what you have with the required measures and give you a list of what's missing, in order of priority.
  3. We put the technical measures in place: access, firewalls, updates, data backups, event logging.
  4. We prepare the documents you need: procedures, a list of systems, what to do in the event of an incident and who to notify.
  5. We help you answer your clients' questionnaires with verifiable facts, and keep everything up to date over time.

MM Security

Our cybersecurity suite: network monitoring, encryption, logs and events (SIEM), vulnerability management, backup and managed service, made and supported by us. With the map to the ISO/IEC 27001 controls.

Discover the suite

Voucher Cloud & Cybersecurity

We're on the voucher supplier list for firewalls, routers and switches, intrusion prevention systems, antivirus, network monitoring, encryption, SIEM, vulnerability management and for configuration, monitoring and ongoing support services. Part of your security spending may be covered by the grant.

What to prepare

The evidence

Who does it, and with what credentials

ISO/IEC 27001 and ISO 9001

ISO/IEC 27001:2022, information security: certificate no. ISMS 0426 002475 issued by ITC International Testing & Certification, an IAS-accredited body (IAF member), since 14/04/2026. Scope: design of cybersecurity solutions, configuration, monitoring and ongoing support services.

ISO 9001:2015, quality: certification audit by EuCI (now Amtivo) completed on 7 April 2026, with the same scope.

Networks and security

Training and certifications in Cisco (networking and security), Fortinet, MikroTik and Ubiquiti, the equipment we install.

Innovation Manager

Andrea is a certified Innovation Manager under the UNI 11814 standard (certificate INN no. 76-M, undergoing Accredia accreditation): he handles the project and grant side.

Every day · Company network

Thirty computers, a network that knows who's coming in

For a company with around thirty workstations we manage the MikroTik network and Fortinet firewall, the VPN for the admin team and blocking of unauthorised devices on the network. Every computer runs our support agent: we spot problems before they cause downtime.

Every day

The websites we host

We host dozens of business websites on our server: web application firewall, server antivirus, security certificates and a full copy every night.

Timing and costs

First we look, then we tell you the price

The security check-up is free. A lot can be seen remotely in a short time; the rest, if needed, with a site survey.

Before we start, you receive a written proposal with the costs: equipment, licences, labour and ongoing support. The cost depends mainly on how many computers and sites there are and what's already in place.

If it's covered by the voucher, we'll tell you in the proposal and let you know what to prepare.

What happens next

From the first message to lasting protection

  1. We reply within 2 hours, Monday to Friday, 9am–1pm and 3pm–6pm.
  2. Free check-up and a clear list of priorities.
  3. Written proposal with solution, costs and timing.
  4. We install and configure, remotely or on site.
  5. We keep checking over time: updates, alerts, reviews. For clients, support is continuous, 24/7.

Questions

What people ask us most often

I have antivirus: am I covered?

It's a good start, but it isn't enough. Most problems come from a stolen password or a deceptive email: you also need two-step verification, a well-configured firewall, regular updates and data backups that can actually be restored.

How do I know whether NIS2 applies to my company?

It depends on the sector and size. If the company has been placed on the list of NIS entities, it will have received a notification from the Agenzia per la Cybersicurezza Nazionale (ACN, the Italian National Cybersecurity Agency) via its platform. If it hasn't received one but works for a company that falls within scope, the client will probably ask it for security assurances anyway.

A client has sent me a NIS2 questionnaire: what should I do?

Companies that must comply have to check the security of their suppliers. The questionnaire usually asks how you protect access, data and backups, and how you handle an incident. We read it together, fix whatever is missing and help you answer with verifiable facts.

Does the Voucher Cloud & Cybersecurity cover security?

Yes, for the costs eligible under the scheme. We're on the supplier list for firewalls, routers and switches, intrusion prevention systems, antivirus, network monitoring, encryption, SIEM, vulnerability management and for configuration, monitoring and ongoing support services. You'll find the details on the voucher page.

I think I'm under attack right now: what do I do?

Go to the Help page: you'll find what to do straight away about locked files, suspicious emails and a website that has changed, plus the form to send us an urgent request.

Phishing
An email or message pretending to come from someone you trust, to get you to click or hand over a password.
Ransomware
A program that locks your files and demands a ransom to unlock them.
Two-step verification
As well as the password, you need to confirm on your phone: a stolen password alone won't get anyone in.
Firewall
The device that decides what can come into and go out of the company network.
ACN and CSIRT Italia
The Agenzia per la Cybersicurezza Nazionale (the Italian National Cybersecurity Agency) and its team that receives incident reports.

Tell us how you work today

A couple of lines are enough: how many computers, where your email is, whether you've received any NIS2 requests. We'll reply within 2 hours during office hours.