Agenzia per la Cybersicurezza Nazionale

What Agenzia per la Cybersicurezza Nazionale does

Agenzia per la Cybersicurezza Nazionale (ACN) is Italy's National Cybersecurity Authority, a government agency established by Decree-Law No. 82 of June 14, 2021 (D.L. 82/2021) and headquartered in Rome. The agency is tasked with protecting national interests in cyberspace, implementing the National Cybersecurity Strategy adopted by the President of the Council of Ministers, and serving as Italy's single point of contact for cybersecurity matters at the EU level. ACN operates through four principal functions: incident response coordination via CSIRT Italia; ICT product evaluation and certification via the Centro di Valutazione e Certificazione Nazionale (CVCN) and OCSI; European cybersecurity research and development coordination via NCC Italia under Regulation (EU) 2021/887; and regulatory oversight of the Italian Network and Information Security (NIS) framework and cloud infrastructure qualification for Public Administration procurement. Since October 2025, the agency has also held institutional oversight of AI systems under Italy's Law No. 132/2025 and the EU AI Act.

The agency's core technical offerings include a public threat intelligence feed (MISP), weekly and periodic threat landscape reports (La Settimana Cibernetica and Operational Summary), vulnerability advisories covering major vendors (Microsoft, Cisco, SAP, Adobe, Mozilla), and the catalogue of qualified cloud infrastructures required for Italian PA procurement. It also operates the E-Academy training platform for cybersecurity workforce development and participates in EU-level exercises such as Cyber Europe. ACN maintains regular cooperation with ENISA and peer National Coordination Centres across the EU, and runs a 12 million euro joint initiative with MUR to strengthen cybersecurity competencies in Italian academia.

ACN is not a commercial entity: it is funded through Italian government budget allocations and PNRR (Piano Nazionale di Ripresa e Resilienza) investments, and does not operate pricing or revenue contracts. Its customer base — Italian Public Administration, Operators of Essential Services, Digital Service Providers, and ICT vendors — is regulated or qualified rather than paying. The agency is led by Director General Andrea Quacivi, installed in June 2026, and has a workforce of 51-100 employees.

Name

Agenzia per la Cybersicurezza Nazionale

Legal name

Agenzia per la Cybersicurezza Nazionale

Website

https://acn.gov.it

Company type

Private

Founded year

2021

Operating status

Operating

Headcount range

51–100 employees

Short description

Agenzia per la Cybersicurezza Nazionale is Italy's National Cybersecurity Authority, coordinating national cyber strategy, incident response via CSIRT Italia, cloud service qualification for Public Administration, and ICT product certification under Italian and EU law.

Ownership category

akta.pro rank

Product category

National Cybersecurity Regulation and Incident Response

NAICS

National Security (928110), International Affairs (92812)

akta.pro primary industry

Cyber Defense & Information Security (National Security) (BPAIAHAE)

akta.pro secondary industries

Critical Infrastructure Protection (CIP) & NERC-CIP Compliance (HDADAJAC), OT/ICS & Critical Infrastructure Cybersecurity Services (BPAKAHAN), Control System Cybersecurity for OT (ICS Security, Monitoring, Hardening) (IMAGABAL)

Keywords

• National cybersecurity authority
• Incident response
• NIS2 compliance
• Cloud qualification
• ICT product certification

Headquarters

HQ city

Rome

HQ country

Italy

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Infrastructure, Others

Revenue model

1. Government Budget Allocation: ACN is a government agency funded through national budget allocations. Revenue model is not commercial but based on state funding for public cybersecurity functions.

Go-to-market motion1 record

Distribution channels3 records

Marketing channels8 records

Core offering

ACN is Italy's National Cybersecurity Authority, delivering incident response through CSIRT Italia, ICT product evaluation and certification through the Centro di Valutazione e Certificazione Nazionale (CVCN) and OCSI under the EU Cybersecurity Act, NIS/NIS2 directive implementation as Italy's competent authority, and cloud infrastructure qualification for the Public Administration. It also coordinates European cybersecurity competence activities as Italy's National Coordination Centre (NCC Italia) under Regulation (EU) 2021/887, publishes threat intelligence via a public MISP feed, and operates the E-Academy cybersecurity training platform.

Product overview

Agenzia per la Cybersicurezza Nazionale (ACN) is Italy's National Cybersecurity Authority, a government agency established by Decree-Law No. 82/2021 to protect national interests in cyberspace. ACN does not offer a commercial product platform but rather provides a portfolio of regulatory, coordination, and technical services. The core services include CSIRT Italia (the national computer emergency response team), the Centro di Valutazione e Certificazione Nazionale (CVCN) for ICT product certification, NCC Italia for coordinating European cybersecurity competence initiatives, NIS directive implementation services, and cloud service qualification for public administration. Additional services include security alerts and bulletins, threat intelligence sharing via MISP, the Operational Summary for threat landscape analysis, and La Settimana Cibernetica weekly publication. ACN also operates the NCCA (National Cybersecurity Certification Authority) under the EU Cybersecurity Act framework and the OCSI certification body.

Differentiator

Problem solved

Functional benefit

Products and services

• CSIRT Italia The national Computer Security Incident Response Team for Italy, providing cyber incident response coordination, threat monitoring, detection, and mitigation for national public and private entities.
• Centro di Valutazione e Certificazione Nazionale (CVCN) National Evaluation and Certification Centre evaluating ICT products and services within the national cybersecurity perimeter, issuing certifications and conformity assessments.
• NCC Italia Italy's National Coordination Centre under Regulation (EU) 2021/887, supporting the European Cybersecurity Competence Network and managing funding opportunities for cybersecurity research and industrial development.
• NIS Services Services for the implementation of the Network and Information Security (NIS) directive in Italy, including registration, categorisation, and compliance oversight for essential and important entities.
• Cloud Services Qualification Regulation and qualification of cloud infrastructures and services for the Public Administration, including the Catalogue of qualified digital infrastructures and cloud services.
• NCCA (National Assessment and Certification Centre) National Cybersecurity Certification Authority applying European certification schemes under the EU Cybersecurity Act (Regulation (EU) 2019/881), overseeing certificates and EU declarations of conformity issued domestically.
• OCSI Certification body operating under the EU Cybersecurity Act framework to issue cybersecurity certifications in Italy.
• MISP Public Feed Public threat intelligence sharing platform using the MISP (Malware Information Sharing Platform) format for cybersecurity indicators of compromise.
• Alerts and Bulletins (Alert e Bollettini) Security advisories and bulletins covering vulnerabilities in software products (e.g., Microsoft, Mozilla, Adobe, Cisco, SAP) with severity ratings and remediation guidance.
• Operational Summary (Analisi sullo stato della minaccia) Periodic threat landscape analysis providing aggregated cybersecurity statistics and trends for Italy.
• La Settimana Cibernetica Weekly cybersecurity publication summarising recent threats, vulnerabilities, and security developments in Italy.

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

Five partnerships are on record, tiered core and major.

• EU AI Act Implementation PartnerscoreStrategic or Co-development Partner · 29 October 2025ACN participates in the Administrative Cooperation Group (ADCO AI) for market surveillance of AI systems under the EU AI Act, hosting meetings and coordinating with other EU agencies.
• ENISA (European Union Agency for Cybersecurity)coreStrategic or Co-development PartnerACN maintains regular cooperation with ENISA, submitting annual reports on security incident notifications and coordinated positions on national requirements to avoid divergence that could create security risks and barriers to the internal market.
• CSIRT Italia NetworkcoreStrategic or Co-development PartnerCSIRT Italia operates as the operational arm of ACN, providing incident response coordination, threat monitoring, and security bulletins to national entities.
• EU Member State National Coordination CentrescoreStrategic or Co-development PartnerACN as NCC Italia coordinates with other EU member state NCCs under Regulation (EU) 2021/887 for cybersecurity research and development programs.
• MUR (Ministero dell'Università e della Ricerca)majorStrategic or Co-development PartnerJoint initiative with MUR providing 12 million euros to strengthen cybersecurity competencies, research, and digital infrastructure in Italian academia.

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• BSI (Bundesamt für Sicherheit in der Informationstechnik): Germany's federal cybersecurity agency with comparable mandate in NIS implementation, certification, and national cyber defense. Operates as a peer national cybersecurity authority within the EU.
• CCN-CERT (Centro Criptológico Nacional): Spain's national cryptologic centre that operates CERT functions and cybersecurity oversight for the Spanish public sector. Directly parallel to ACN's mandate within another EU member state.
• Swedish Civil Contingencies Agency (MSB): Sweden's national authority coordinating cybersecurity and NIS-related functions through CERT-SE. Operates as a comparable national cybersecurity coordination body within the EU.
• NCSC-UK (National Cyber Security Centre): UK's national cybersecurity authority providing incident response, NIS oversight, and cybersecurity guidance. While outside the EU post-Brexit, it operates with highly similar mandate structure to ACN.
• NCSC-NL (Nationaal Cyber Security Centrum): Netherlands' national cybersecurity centre with similar mandate covering NIS, incident response, and national cyber coordination. Direct peer agency within EU.
• CNCS (Centro Nacional de Cibersegurança): Portugal's national cybersecurity centre operating as the national CSIRT and coordinating entity. Peer agency with similar mandate under EU NIS frameworks.
• ANSSI (Agence Nationale de la Sécurité des Systèmes d'Information): France's national cybersecurity agency with parallel mandate covering national cybersecurity strategy, incident response (CERT-FR), NIS oversight, and certification. The most direct institutional peer to ACN with similar scope and regulatory authority in France.
• Federal Cyber Security Authority (Austria - Handlungsfähigkeitszentrum): Austria's national cybersecurity coordination function, including GovCERT and NIS oversight. Direct EU peer with similar mandate structure to ACN.

Broad incumbents

• ENISA (European Union Agency for Cybersecurity): EU-level cybersecurity agency that coordinates cybersecurity capabilities across member states. ACN coordinates with ENISA as Italy's national authority, making ENISA a direct institutional counterpart at the EU level.
• CISA (Cybersecurity and Infrastructure Security Agency): US federal cybersecurity agency with broader scope including critical infrastructure protection. While US-based, it shares operational parallels with ACN in coordinating national cyber defense and incident response.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xtwitter.com/csirt_it
• YouTubeyoutube.com/@AgenziaCybersicNazionale
• LinkedInlinkedin.com/company/agenzia-per-la-cybersicurezza-nazionale

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Agenzia per la Cybersicurezza Nazionale