National Cybersecurity Strategy In order to reach high security levels in the cyber domain and to protect strategic assets, the overall framework of the institutional cybersecurity architecture necessarily includes the close synergic contribution of other Public Administrations, to which the legislation in force assigns exclusive prerogatives in relation to the respective institutional mandates. Among these Public Administrations, in particular: the Intelligence community, competent for cyber-intelligence, carries out research and intelligence gathering aimed at the protection of Italy’s political, military, economical, scientific and industrial interests and it elaborates analysis, assessments and predictions on cyber threats to preserve national security, also by carrying out cyber operations. In particular, according to the modalities and procedures established by the Law no. 124/2007, the Director General of the Security Intelligence Department (DIS), with the support of the Department’s offices, coordinates intelligence gathering activities. The Agencies, each within their respective area of competence, carry out – according to the directives issued, after having consulted the CISR, by the Prime Minister, as well as the guidelines for the coordination of intelligence gathering activities established by the DIS Director General – research and intelligence gathering activities aimed at the national cyber protection and security; the Ministry of the Interior, as the national public security authority, protects public order and security, public aid and civil defence. In particular, the Department of public security ensures the prevention and fight against cybercrimes through the Postal and Communication Police, without prejudice to the competences, in the areas defined by the legislator, of the offices and commands of the Italian National Police, the Carabinieri Corps and the Financial Police. The National Cybercrime Centre for Critical Infrastructure Protection (CNAIPIC) of the Italian National Police acts to protect digitized critical infrastructures from cybercrimes, carrying out a continuous monitoring of the internet and the functions of national contact point for the emergencies related to transnational cybercrime. Within the Department of Public Security, it has been established – by means of Decree of the President of the Republic 19 November 2021, no. 231, which modifies the DPCM 11 June 2019, no. 78 – and will soon be operational the Central Directorate for scientific police and cybersecurity. The Directorate will be competent for developing the cyber prevention and protection activities already attributed to the CNAIPIC, as well as those assigned to the Ministry of Interior by the Perimeter Decree, which is in charge, among others, of verifying the security conditions and the absence of known vulnerabilities in relation to ICT procurement intended to be used in its own ICT networks, systems and services that have been included in the Perimeter. The assessment is carried out through the Ministry’s Assessment Centre which operates in close cooperation with the CVCN; The Ministry of Defence, in charge of the military defence and security of the State. In particular, the Ministry defines and coordinates military policy, governance and capabilities in the cyber domain, as well as the development of cyber capacities and the protection of their networks and systems both on national ground and in theatres of operations abroad. The Defence is also in charge of planning and conducting both offensive and defensive military cyber operations through the Joint Command for 29

Select target paragraph3

Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents