Legislative Decree No. 134 of September 4, 2024, is an Italian regulation that transposes Directive (EU) 2022/2557 of the European Parliament and Council, related to the resilience of critical entities. This decree repeals the previous Directive 2008/114/EC and establishes measures to ensure that essential services for society, the economy, health, public safety, and the environment are provided without interruptions.

The main objectives of Legislative Decree No. 134 are:

• Ensure continuity of essential services: Ensure that vital services for society and the economy are provided without interruptions.
• Strengthen the resilience of critical entities: Improve the ability of critical entities to withstand and respond to incidents that could disrupt the provision of essential services.
• Harmonize regulations: Create a uniform regulatory framework for managing risks and resilience of critical entities across the EU.

The decree applies to:

• Critical entities: Entities that provide essential services for maintaining vital functions of society, economic activities, health, public safety, or the environment.
• Competent sectoral authorities: Authorities responsible for overseeing and enforcing the measures established by the decree.

The main requirements of the decree include:

• Risk assessment: Critical entities must carry out periodic risk assessments to identify and mitigate vulnerabilities.
• Resilience plans: Entities must develop and implement resilience plans to ensure the continuity of essential services.
• Incident reporting: Entities are required to promptly report any incident that may disrupt the provision of essential services to the competent authorities.
• Oversight and sanctions: Competent authorities must oversee compliance with the obligations and can impose penalties in case of non-compliance.

Legislative Decree No. 134 was published in the Official Gazette on September 23, 2024, and will come into effect on October 18, 2024.

Official Decree here: Gazzetta Ufficiale – Decreto 134