ANNEX 2 GLOSSARY OF CYBERSECURITY AGCOM – The Communications Regulatory Authority The two main tasks assigned to this independent Authority by Law no. 249/1997 are to ensure equitable conditions for fair market competition and to protect fundamental rights of all citizens. CERT – Computer Emergency Response Team Organization with the tasks of preventing cyber incidents and coordinating response to cyber events. Several CERTs also carry out training and information functions for ICT users. APT – Advanced Persistent Threat A threat entailing a targeted attack, aimed at installing a number of malwares in the networks of the target in order to establish links necessary for remotely exfiltrating relevant information from the networks of the targeted entity. CERT-PA – Computer Emergency Response Team – Public Administration Evolution of the CERT-SPC (see next paragraph) with a competence extended to Public Administration’s ICT and computer systems and to all its services, in addition to the interconnecting networks. It has the task of supporting and coordinating the Public Administration in preventing to, responding to, and recovering from cyber incidents. BYOD – Bring Your Own Device A policy allowing company employees to bring their own mobile devices (laptops, smart phones, tablets, etc.) to their workplace and using them in order to have access to information and corporate applications, i.e. emails. CERT-SPC – Computer Emergency Response Team – System of Public Connectivity The structure responsible, at the national level, for preventing, monitoring, ensuring information sharing and analysis of the security incidents within the Public Administration SPC. It has also the mandate of ensuring the ccTLD – Country Code Top Level Domain The last part of the Internet domain name used by a State. It consists of two letters: “.it” for Italy. 40

Select target paragraph3