National Cybersecurity Strategy Specifically, the Agency, in compliance with the competences attributed by the legislation in force to other Administrations: acts as a cybersecurity regulatory, certificating and supervisory entity defining, for example, the minimum levels of security measures for the different sectors (including energy, transportation, banking, financial markets infrastructures, health, supply and distribution of potable water, public administration), and being able to carry out inspections and impose sanctions; takes care of and promotes the definition and maintenance of an updated and coherent cybersecurity legal framework; contributes to reducing the risks deriving from technological supply by increasing security levels of the supply chain, with particular regard to solutions and products intended to be used on infrastructures and ICT systems relevant for national security; develops monitoring, detection, prevention, analysis, and response to cyber incidents capabilities; coordinates, in connection with the Ministry of Foreign Affairs and International Cooperation, international cooperation in the area of cybersecurity; supports the development of industrial, technological and scientific competences and capabilities and it promotes the education, technical-professional development and qualification of human resources; carries out cybersecurity communication activities and promotion of cyber awareness, contributing to the development of a national culture on the subject; is appointed as National Coordination Centre (NCC), according to article 6 of the Regulation (EU) 2021/887 of the European Parliament and of the Council of May 20th, 2021, establishing the European Cybersecurity Industrial, Technology and Research Competence Centre (ECCC) and the Network of National Coordination Centres. To enable the carrying out of the above-mentioned functions, the following structures operate within the Agency: the Computer Security Incident Response Team (CSIRT) Italia, the action of which is aimed at preventing, monitoring, detecting, analysing, and responding to cyber incidents; the National Assessment and Certification Centre (CVCN), which will verify the security and the absence of known vulnerability in ICT goods, systems and services used in infrastructures which State’s essential functions and services depend upon; the National Coordination Centre (NCC) on cybersecurity in the industrial, technology, and research field. 28