Risk-based safeguards
Applications, bookings, official delegations and private data require role-based access, strong authentication, vulnerability and patch management, backups, monitoring, business continuity and incident response. Effectiveness must be evidenced by actual tests and review.
NIS2 applicability is not assumed
Directive (EU) 2022/2555 is implemented in Italy by Legislative Decree 138/2024. Whether an entity is subject to NIS2 depends on its sector, size, characteristics and any competent designation. A cultural forum or website is not automatically a regulated NIS entity.
A documented scope assessment must verify ACN registration and notification duties where relevant. Publishing this page is not NIS2 compliance or certification.
Incidents and notifications
Security incidents are triaged and escalated. Personal data breaches are assessed under GDPR Articles 33–34; NIS2 reporting depends on formal applicability and the specific incident. Sensitive security architecture and contact chains are not disclosed publicly.
Responsible reporting
Report suspected vulnerabilities to info@medconvergence.org without destructive testing, credential attacks, data extraction or public disclosure. This notice does not grant permission for penetration testing.
Contactar con el DPO
dr. prof. Giuseppe Izzo
dpo@medconvergence.org
Socio tecnológico: UESE ITALIA S.p.A. — assistenza e infrastruttura tecnologica nei limiti degli accordi da formalizzare.