The Italian Cybersecurity Action Plan sion of the cyber NISP, new role for the National Cybersecurity Management Board/NSC, etc.) (see. AI 1). • The simplification of the decision making for cyber crises’, aimed at facilitating prompt and efficient re- sponse and remediation (see AI 5). Of particular relevance are the measures intended to: • Assign to the Director General of the Security Intelligence Department a central role among the entities composing the National cybersecurity NATIONAL CYBER SECURITY FRAMEWORK Prime Minister Art-7 bis Leg. Decree 30 Oct. 2015 n.174 National digital agenda CISR Inter-ministerial Committee for Security of the Republic PA ENTERPRISES PA-CERT Agency for Digital Italy Ministry of Interior Cybersecurity National Strategy CNAIPIC National Anti-crime Computer Centre for the Protection of Critical Infrastructure Ministry of Defence T-CISR DIS ITA-CERT Ministry of Economic Development CIOC NSC Joint Command for Cyber Operations National Center for Evaluation and Certification (HWand SW) AISE ecosystem. AISI Through the Security Intelligence Unit of the Defence General Staff assessment (see AIs 5, 6, 7). • Suppress the cyber NISP and relocate the National Cybersecurity Management Board within the Security Intelligence Department. The board will be responsible for cybersecurity crises’ management and will be supervised by a Security Intelligence Department Deputy Director. • Promote close interaction between the National CERT and the Public Administration CERT in order to facilitate their operational coordination and guarantee a single detection capacity, alert, and first cyber incidents’ 10 Ministry • Establish a nationalof Defence evaluation and certification center, within the Ministry of Economic Development, responsible for security and reliability check of ICT components for Critical Infrastructures (see AI 7). • Enlarge and better define the number of actors operating in security relevant sectors (Operators of Essential Services and Digital Service Providers) required to notify serious cyber incidents or else to pay effective, proportionate, and dissuasive penalties (see AIs 2, 5, 6).