The Italian Cybersecurity Action Plan f. Minimize the impact of IT cyber incidents —in particular of those events that produced information loss and/or IT system disruption. g. Develop a proactive approach to IT security and create integrated detection databases for incident & response and intrusion. h. Develop a resilient approach to assure business continuity and disaster recovery. 5.2 CERTs development a. Develop CERTs functions according to the NIS Directive transposition decree. b. Increase CERTs’ efficacy and, in particular, of the National one towards corporate entities, including SMEs, and Public Administration CERT towards Public Administration. c. Find efficient approaches to support Local Public Administrations. d. Support EU and international cooperation among CERTs by actively taking part to the CSIRTs Network —NIS Directive— and other EU and international technological projects (see AI 4.3). 5.3 Procurement a. Define Public Administrations’ purchasing mechanisms in order to guarantee cybersecurity. b. Identify procurement regulations and procedures for a cyber secure Public Administration supply chain. 22