The Italian Cybersecurity Action Plan 7.4 ICT security certification a. Manage the National Framework for ICT Certification of un-classified products and services through the Computer Security Certification Organization (Organismo di Certificazione Informatica OCSI). b. Keep the national scheme for certification of information systems’ processes up to date. c. Enhance operational capability of the Evaluation Center (Centro Valutazione CE.VA), lab for technical assessment of ICT products and systems dealing with classified data. d. Take part to the activities carried out by international organizations managing mutual recognition of certification standards. e. Increase evaluation competences of DIS-UCSe (Security Intelligence Department-Central Office for Secrecy) when issuing security certificates and homologations for ICT systems managing classified data, including assessment procedures for classified and unclassified information. 7.5 Cyber defense measures for Essential Service Providers and Critical Infrastructures a. Test protection systems on a regular basis through technical and procedural checks. b. Establish an independent control system (eg. external audit). 26