Insights into the National Cybersecurity Agency

This chapter delves into the establishment and evolution of the National Cybersecurity Agency (ACN) in Italy, a pivotal move in the nation’s cybersecurity posture, instituted by the decree-law in 2021. The ACN represents the most significant institutional actor in the current reconfiguration of the Italian cybersecurity governance architecture. The implementation of the ACN marks a shift toward centralized cybersecurity governance, aiming to streamline efforts, improve response to cyber threats, and better manage the national cyber landscape in alignment with European Union directives and the increasing complexity of global cyber threats. This chapter will explore the ACN’s foundational objectives, structural organization, and operational dynamics. It discusses how the ACN is positioned as the principal national Authority in cybersecurity, absorbing previously scattered responsibilities across various sectors and agencies, including intelligence services. The chapter will also critically assess the implications of centralizing cybersecurity powers within a single Agency, examining potential benefits and risks associated with this move. Through this exploration, the chapter contributes to a broader understanding of the national cybersecurity strategy and offers insights into the effectiveness of its goals.