ITALIAN CYBERSECURITY CORE TASKS The Action Plan details the initiatives needed to achieve a step change in increasing national information system and network security levels, as required by Prime Minister Decree February 17th 2017. • Leverage the competences and responsibilities of all relevant stakeholders (public sector, private sector, research and academia). • Refer to the most relevant activities aimed at consolidating the national cyber defense system including: assets’ common protection (CERT); SW/HW certification; identification of critical functions; info-sharing requirements in case of relevant cyber events; etc. In spite of 2014-2015 efforts, the efficacy of measures adopted to protect networks and systems showed a patchy picture, with discrepancies persisting both horizontally —between public and private stakeholders— and vertically, within the same domain. Pending the transposition of the “EU Directive 2016/1148 concerning measures for a high common level of security of networks and information systems across the Union” into national legislation, the 2013 Italian cybersecurity framework has been revised and optimized through: National security sensitive information is not just a government business. Private entities operating in strategic sectors must be considered as key assets and included into a holistic approach to national cybersecurity that provides for the implementation of minimum security requirements for Country-critical systems. • The simplification of both ordinary and emergency management procedures (see AIs 1, 2, 5). • The reorganization of the National cybersecurity framework (suppres- On these premises, the core tasks were selected for their systemic relevance due to the fact that they: 9