Patch Wednesday | Cybersecurity Wednesdays
An event by OGR Torino curated by Futura Law Firm

Anatomy of an Incident
When cybersecurity becomes more than an IT issue

Wednesday 28 October 2026 | 6.30 PM
OGR Torino, Mezzanino

Free admission, booking available

Patch Wednesday, your midweek cybersecurity event series, returns with a session curated by Futura Law Firm, in collaboration with Neverhack Italy.

On 28 October at 6.30 PM, in the Mezzanino at OGR Torino, we will reconstruct a real cybersecurity incident step by step, from the initial compromise to its legal and organisational consequences.

Cybersecurity has evolved beyond its technical dimension: the way it is regulated has also changed significantly. The transition from the first European directive, NIS1, to NIS2 has brought senior management accountability into focus. A cyberattack therefore affects not only IT systems, but also governance, contracts and notification obligations.

During the event, a real case will be examined from two complementary perspectives: the technical perspective of those entrusted with managing the response to the attack, and the legal perspective of those assessing its implications for liability and compliance.

SPEAKERS

VITTORIA DIOTALLEVI
Tech Lawyer – Futura Law Firm
Diotallevi will trace the evolution from NIS1 to NIS2 and analyse the case from a regulatory perspective, examining the obligations triggered by the incident, compliance deadlines and contractual liability.

MARIA CHIARA CELOZZI
Senior Sales Account Manager – Neverhack Italy
Celozzi will bring an operational perspective, exploring how an attack unfolds, how it is detected and contained, and how an organisation’s architecture changes after an incident.

ETTORE GUARNACCIA
Group Head of Defense Center Solutions, Intesa Sanpaolo
He will explore the practical and technical aspects of a cyberattack, as well as how it is managed internally from a technical and technological perspective.

AGENDA

• From NIS1 to NIS2: why cybersecurity has become a senior management responsibility.


• Technical session | Anatomy of the case: attack and compromise, detection times, containment and remediation, lessons learned and architectural changes.


• Legal session | Assessing the case under the law: legal classification of the incident, obligations and deadlines, contractual liability, implications for governance and compliance.

Q&A: speakers will answer questions from the audience.