Autosped G strengthens cybersecurity governance: NIS2 training program launched for Management

Tortona, April 17, 2026 - Autosped G has taken a decisive step in strengthening its cybersecurity governance by launching a comprehensive training program dedicated to the NIS2 Directive, aimed at the Boards of Directors, Chief Executive Officers, and Management of the Group's companies.

The initiative, hosted at the Nova Arena Press Room, saw the participation of administrators, board members, directors, and senior executives of the Group's main companies, including those formally involved in NIS2 governance - Points of Contact and CSIRT representatives - demonstrating the high level of attention from top management towards the new responsibilities in the field of cybersecurity.

The training program forms part of the broader process of aligning Autosped G with the new European and national regulatory framework on digital security, introduced by Directive (EU) 2022/2555 - NIS2, transposed into Italian law by Legislative Decree 138/2024, which assigns a central role to governing bodies and executive management in defining, supervising, and verifying cybersecurity measures.

During the day, the following topics were examined in a structured and practical manner:

• the European and national regulatory framework on cybersecurity;
• the new obligations for companies and corporate groups, with a particular focus on the responsibilities and sanctions affecting governance bodies;
• the role of the National Cybersecurity Agency (ACN), its determinations, and key operational guidelines;
• cybersecurity risk management models, incident management, and the protection of supply chain security;
• the integration of cybersecurity into business processes, operational continuity, and the protection of critical assets.

The sessions were led by Mauro Sartor, Group ICT Manager, while the speakers included Margherita Masseroni, Manager at Partners4Innovation and expert in governance and regulatory compliance, and Luca Bechelli, Practice Leader at Partners4Innovation, member of the CLUSIT Scientific Committee and Senior Advisor to the Cybersecurity & Data Protection Observatory of the Politecnico di Milano. They provided management with a clear perspective on the strategic, organizational, and operational implications of NIS2.

"The NIS2 Directive marks a paradigm shift: cybersecurity is no longer just an IT issue, but a direct responsibility of governing bodies. Investing in management training means strengthening the resilience of the entire Group," as highlighted during the meeting.

The program represents a key milestone in the broader information security journey of Autosped G, launched in 2025 and further developed in 2026, which includes:

• the definition and updating of security policies, approved by governing bodies;
• strengthening risk management and cyber incident response processes;
• oversight of supply chain security and critical suppliers;
• structured awareness and ongoing training activities, aimed both at top management and the entire organization.

With this initiative, Autosped G reaffirms its commitment to considering cybersecurity not only as a technological protection measure, but as a strategic factor for resilience, reliability, and business continuity, fully integrated into decision-making and corporate governance processes.