The Italian Cybersecurity Action Plan 6.3 Attribution and sanctions a. Create a legal framework and methodology for the attribution of security violations (and related sanctions) by network managers and users. 6.4 Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of networks and information systems across the Union a. Promote dialogue with private operators in order to facilitate the NIS Directive transposition process. b. Assess impact of the NIS Directive over the National Cybersecurity Architecture in order to align national regulations. c. Transpose the NIS Directive and define implementation provisions to unify new requirements with those concerning Critical Infrastructures. 24