The Italy State Mint and Polygraphic Institute (IPZS) and the Carabinieri paramilitary police force have joined forces to secure Italy's digital backbone, signing a cybersecurity pact on June 30 that establishes shared protocols for detecting and neutralizing threats to government networks.
Why This Matters:
• Coordinated defense: Two critical state agencies will now exchange real-time threat intelligence through standardized channels
• Operational hub: Joint oversight will be managed by the Poli-CERT emergency response team and the Carabinieri's Telematic Security Center
• International compliance: Information sharing will follow recognized global standards for data classification and protection
Institutional Muscle Behind the Agreement
The operational framework assigns specific duties to dedicated personnel on both sides, ensuring that cyber threat data flows continuously between the Poli-CERT (Computer Emergency Response Team of IPZS) and the Telematic Security Center of the Carabinieri General Command. Each entity has appointed operational contacts tasked with maintaining both the speed and consistency of information exchange—a recognition that cyber incidents demand immediate coordination rather than bureaucratic delays.
According to the protocol, roles and responsibilities are precisely delineated, eliminating ambiguity about who handles what when a threat emerges. The arrangement mirrors best practices seen across European Union member states, where centralized cybersecurity agencies work in tandem with law enforcement to protect critical infrastructure.
Pattern of Expanding Partnerships
This is the second major cybersecurity accord signed by the State Mint in recent months. On May 6, IPZS formalized a similar agreement with the Guardia di Finanza (Italy's Financial Police), aimed at strengthening defenses against cyber intrusions and improving attack prevention capabilities. That earlier pact included provisions for sharing technical reports on protective technologies, running joint awareness campaigns, and participating in collaborative training exercises.
The multiplication of such agreements suggests a deliberate strategy by the Italy government to weave a tighter security net around public sector digital assets. Rather than operating in silos, agencies with specialized capabilities—whether in currency production, law enforcement, or financial oversight—are being systematically linked through formal information-sharing protocols.
What the State Mint Brings to the Table
IPZS is far from a ceremonial institution. Beyond printing banknotes and producing identity documents, the agency operates one of Italy's most sophisticated cyber defense operations. The Poli-CERT team employs Security Information and Event Management (SIEM) infrastructure for real-time threat detection, continuously scanning for anomalies across state systems.
Recent initiatives underscore the agency's expanding role in national digital security. In early 2025, IPZS rolled out Sephi, a monitoring service designed to shield public administration email accounts from phishing attacks and abuse. Civil servants can now forward suspicious messages to the platform and receive immediate feedback. A separate project, developed in partnership with the National Cybersecurity Agency (ACN), involves building a secure messaging platform for government use—complete with encrypted chat, file sharing, and video communication—to reduce reliance on foreign-owned platforms.
The agency also recently awarded a €15.9M contract to Olidata for upgrading the central infrastructure supporting the Electronic Identity Card (CIE) system. The overhaul includes enhanced business continuity and disaster recovery capabilities, as well as new perimeter security services. Part of this work is funded through Italy's National Recovery and Resilience Plan (PNRR), reflecting the government's view of digital identity as a critical national asset.
Carabinieri's Digital Posture
The Carabinieri, traditionally associated with street patrols and criminal investigations, have quietly built substantial cyber competencies. The force operates under a three-year IT plan covering 2024 through 2026, recognizing that digital tools are now fundamental to both investigative work and internal operations. In a sign of its commitment, the Carabinieri issued a tender in 2025 for 65,000 cybersecurity software licenses, aimed at hardening its networks against intrusion.
The Telematic Security Center, which will co-manage the new IPZS partnership, functions as the Carabinieri's nerve center for monitoring digital threats. By pooling intelligence with the State Mint's Poli-CERT, the center gains access to a broader threat landscape—particularly valuable given that IPZS monitors vulnerabilities affecting identity systems, payment infrastructure, and public administration communications.
The Threat Landscape Facing Italy
Italy ranks among the most targeted countries globally for cyberattacks, according to recent assessments by the National Cybersecurity Agency. The threat environment has grown more complex, with attackers refining their methods and exploiting new vulnerabilities introduced by rapid digitalization.
Distributed Denial of Service (DDoS) attacks remain a favored tactic, especially among hacktivist groups seeking to disrupt public services. While mitigation measures have generally contained the damage, the ACN has noted a resurgence in such campaigns, particularly against local and central government websites.
Ransomware continues to hammer Italian businesses, with manufacturing, retail, and technology sectors bearing the brunt. Attackers constantly tweak their encryption methods to evade traditional defenses, and the financial toll—measured in ransom payments, downtime, and reputational damage—has climbed steadily.
Phishing and social engineering serve as the entry point for many breaches, with email remaining the most exploited vector. Once an attacker compromises credentials through a deceptive message, they can move laterally through networks, exfiltrating data or planting malware.
A newer concern involves artificial intelligence-powered attacks. Threat actors are using AI to automate reconnaissance, craft more convincing phishing emails, and scale operations. The technology lowers the skill barrier for launching sophisticated campaigns, expanding the pool of potential adversaries.
Supply chain attacks pose another hazard, as the compromise of a single technology vendor can cascade through multiple interconnected organizations. Meanwhile, the convergence of IT and operational technology (OT) systems—particularly in manufacturing and critical infrastructure—has expanded the attack surface without corresponding upgrades to security models.
Human error and weak passwords remain persistent vulnerabilities, as does the failure to apply security patches promptly. The National Cybersecurity Agency has flagged these factors as low-hanging fruit for attackers.
How This Fits Into European Coordination Models
Italy's approach aligns with broader European Union strategies for cyber defense. Most member states have established centralized cybersecurity agencies—France has ANSSI, Germany operates BSI, and Italy created the ACN—that set national policy, coordinate incident response, and foster a security culture across public and private sectors.
The EU's Agency for Cybersecurity (ENISA) supports member states by developing common standards, running certification schemes for ICT products, and facilitating cross-border cooperation through the CSIRT Network, which links national Computer Security Incident Response Teams.
Recent initiatives like the European Cyber Shield and the European Cyber Solidarity Act aim to federate Security Operations Centers and national CERTs, creating a continent-wide early warning system. The EU Cyber Blueprint, adopted by the Council, establishes an operational framework for responding to large-scale incidents, defining roles for member states, EU institutions, and private stakeholders. It also includes a Cybersecurity Reserve—a pool of technical and human resources that can be rapidly deployed when national capacities are overwhelmed.
Italy's bilateral agreements between agencies like IPZS, the Carabinieri, and the Guardia di Finanza mirror this multilayered defense philosophy: no single entity holds a monopoly on expertise, so resilience depends on systematic information sharing and joint action.
What This Means for Residents
For individuals and businesses in Italy, the practical impact of such agreements may not be immediately visible—there are no new regulations to follow or forms to file. But the coordination between the State Mint and the Carabinieri strengthens the scaffolding supporting everyday digital services.
When you renew your Electronic Identity Card, authenticate using the CIE digital wallet, or interact with a government email address, the underlying systems are now monitored by teams that share threat intelligence in real time. If a phishing campaign targets public servants or a DDoS attack floods a ministry website, the response is faster and more coordinated than it would be if agencies worked in isolation.
The broader implication is that Italy is moving toward a more integrated cybersecurity posture, reducing the fragmentation that often hampers effective defense. For expats, investors, and businesses navigating Italian bureaucracy, this translates to potentially fewer disruptions from cyberattacks—and, in the event of a breach, a more coherent recovery effort.
The challenge ahead lies in execution. Formal agreements are only as strong as the operational culture that sustains them, and the shortage of cybersecurity professionals across Italy remains a significant constraint. Whether these partnerships deliver measurable improvements will depend on consistent funding, training, and political will to prioritize digital defense as the threat landscape continues to evolve.
