ITALIAN ACTION PLAN Action items (AI) AI 1. Reinforcing intelligence, law enforcement, and defence capabilities. AI 2. Strengthening public-private cooperation. AI 3. Fostering IT security culture. Education and training. AI 4. International cooperation and cyber exercises. AI 5. Incident prevention, response and remediation. AI 6. Updating cybersecurity legislation and managing compliance at international level. AI 7. Security protocols and standards compliance. AI 8. Supporting industrial and technological development. AI 9. Strategic and operational communication. AI 10. Resources. AI 11. Implementing national cyber risk management. The review focused in particular on the following: • AI 5 (Incident prevention, response and remediation) which includes provisions to strengthen the existing CERTs, to create the structures required by the NIS Directive (CSIRT, national single point of contact, National Authorities) and to establish efficient coordination procedures among all current and future cybersecurity framework’s stakeholders (CERT, CSIRT, intelligence, law enforcement, defense, Agency for Digital Italy, etc.). • AI 1 (Reinforcing intelligence, law enforcement, and defense capabilities) which, once updated according to the experience gained during the previous two years, aims at boosting national cybersecurity response capability. In order to ease a quick improvement of the national cybersecurity framework, a series of core tasks to be pursued with priority was identified (see box below). Tasks were chosen according with the review of the previous strategy and taking into account developments occurred both at national and international level. CORE TASKS • • • • • • • • Review governance and responsibilities of the National Cybersecurity Management Board. Simplify decision making procedure for cyber crises’ management. Reduce complexity within the national cybersecurity framework through organizations’ suppression/merger. CERTs’ gradual unification. Creation of a national cybersecurity evaluation and certification center. Creation of a venture capital fund or foundation. Creation of a National Cybersecurity R&D Center. Creation of a National Cryptographic Center. 7