The Cyber Security Core: what it is and what it does 

Table of contents

• What is the Cyber Security Core
• What the Cyber Security Core does
• A key element in the national strategy
• The role of the assessment and coordination center
• An interministerial model of collaboration

As often highlighted on this blog, cyber security is a strategic priority for the security of the Republic. 

At the center of this protective network lies the Cyber Security Core, established within the National Cyber Security Agency (ACN). 

It plays a fundamental role in the cyber security area by ensuring preparedness and response to potential crisis situations that could compromise the country’s critical infrastructure. 

What is the Cyber Security Core

The Cyber Security Core, introduced by Article 8 of Decree-Law No. 82 of June 14, 2021, converted with amendments by Law No. 109 of August 4, 2021, is an interministerial body operating under the guidance of the ACN. It includes representatives from various government institutions, such as: 

• The Department of Information Security (DIS)

• The External Information and Security Agency (AISE)

• The Internal Information and Security Agency (AISI)

• Other ministries involved in the Interministerial Cyber Security Committee (CIC)

The Core supports the Prime Minister in prevention, crisis management, and activating alert procedures. This integrated structure ensures effective collaboration among the various institutional entities responsible for digital security. 

What the Cyber Security Core does

The Cyber Security Core performs multiple tasks, including: 

• Crisis prevention and management
  Provides operational support in threat assessment and defining security measures. 

• Advisory, proposals, and oversight
  Guides the government on cyber security policies, ensuring alignment with the objectives of the National Cyber Security Strategy. 

• Coordination with other actors
  Works closely with universities, research institutions, and private operators to address emerging issues. 

Additionally, the Core leverages tools like the Security Incident Response Team (SIRT) and the Computer Security Incident Response Team (CSIRT), which rapidly respond to cyberattacks. 

A key element in the national strategy

The presence of the Cyber Security Core is part of the National Cyber Security Strategy, which aims for national strategic autonomy in the digital sector.

Italy, through the work of the National Cyber Security Agency (NCA), aims to:

• Protect critical infrastructures, including electronic communications and cloud services

• Strengthen national IT system evaluation and certification to prevent vulnerabilities. 

• Promote international cooperation to address transnational threats

The role of the assessment and coordination center

Another important entity is the National Coordination Center, which works closely with the Cyber Security Core. This center is responsible for continuously monitoring the threat landscape, integrating information from various sources to provide an up-to-date and detailed picture of the situation. 

The Evaluation Center, on the other hand, is responsible for certifying devices and software used in Public Administration, ensuring they meet high-security standards and are immune to potential risks. 

An interministerial model of collaboration

The interministerial nature of the Cyber Security Core is a distinctive element that enhances its effectiveness. Through synergy among representatives from various institutions, the Core can address complex issues ranging from the protection of sensitive data to the management of cyber emergencies. 

This collaboration enables prompt responses to cyberattacks and ensures the security of the nation’s essential infrastructures, while also strengthening user trust in digital services. 

In conclusion… 

The Cyber Security Core is a cornerstone for ensuring Italy’s digital security. Its structure, functions, and strategic role make it essential for tackling the challenges of an increasingly connected world.

With an integrated approach and a forward-looking vision, the Core not only protects the present but also lays the foundations for a secure and resilient digital ecosystem. 

Questions and answers 

1. What is the Cyber Security Core? 
   It is an interministerial body that supports the government in preventing and managing cyber security crises. 
2. What is the role of the National Cyber Security Agency? 
   The ACN coordinates digital security strategies and supervises the work of the Cyber Security Core.
3. Which ministries participate in the Cyber Security Core? 
   Ministries involved in the Interministerial Cyber Security Committee and other institutions such as DIS, AISE, and AISI. 
4. What is the role of the National Coordination Center? 
   It monitors cyber threats and provides an updated overview of the security situation. 
5. What is the National Cyber Security Strategy? 
   It is a strategic plan aimed at ensuring the country’s digital autonomy and security. 
6. What are the tasks of the Cyber Security Hub? 
   Crisis prevention, government advisory, and coordination among institutional and private stakeholders. 
7. How are cyberattacks addressed? 
   Through the support of specialized teams like the Security Incident Response Team (SIRT). 
8. What is the role of the Evaluation Center? 
   It certifies the security of devices and software used in Public Administration. 
9. What is the legal reference for the Cyber Security Core? 
   Article 8 of Decree-Law No. 82 of June 14, 2021, converted with amendments by Law No. 109 of August 4, 2021. 
10. Why is national strategic autonomy important? 
    To protect critical infrastructures and reduce dependency on foreign actors in the technological field.