The Italian Cybersecurity Action Plan 1.3 Countering cyber threats a. Improve attribution capabilities. b. Develop a consistent cyber situational awareness, through accurate assessments of cyber activities, in order to improve situational knowledge, threat prevention, and countermeasures. c. Facilitate information sharing between public authorities and private sector. d. Improve incident and cybercrime integrated response capabilities, according to preset protocols, and stimulate new legislative initiatives in order to create technical intervention teams to promptly support central Administrations, Operators of Essential Services and Critical Infrastructures in case of relevant cyber events (see also AI 5.1c). 1.4 Cyberspace defense operational capabilities a. Strengthen cyberspace defense structures and secure long term efficiency and effectiveness of their assets. b. Establish Command and Control structures capable of effective cyberspace military operations planning and implementation. 1.5 Cyber incident management: lessons learned a. Create relevant procedures and tools for processing lessons learned and managing cyber incidents (collection, analysis/evaluation, and sharing) on a need-to-know/need-to-share basis among public and private organizations. 14