{"id":4189,"date":"2025-03-17T09:35:16","date_gmt":"2025-03-17T09:35:16","guid":{"rendered":"https:\/\/howto.fbk.eu\/?page_id=4189"},"modified":"2026-07-09T11:31:37","modified_gmt":"2026-07-09T11:31:37","slug":"joint-lab-for-cybersecurity","status":"publish","type":"page","link":"https:\/\/howto.fbk.eu\/en\/the-foundation\/joint-lab-for-cybersecurity\/","title":{"rendered":"Joint Lab for Cybersecurity"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\n\t\t
\n
\n
\n
\n
\n

Pisa, may 20th 26<\/p>

Towards a new security governance: JL presented at GARR Conference 2026<\/h2>\n <\/div>\n link to the magazine\n \n \n <\/svg>\n <\/span>\n <\/a>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\n\t\t
\n
\n
\n
\n
\n

april 14th 26<\/p>

Security status 2026 in FBK by JL<\/h2>\n <\/div>\n link to academy\n \n \n <\/svg>\n <\/span>\n <\/a>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n
\n
\n

In recent years, the evolution of IT infrastructures has forced to rethink cybersecurity.<\/p>

At FBK, this challenge led in January 2025 to the creation of a Joint Lab for Cybersecurity<\/strong>, a joint initiative between the IT Service and the Center for Cybersecurity, strongly supported by the General Secretariat. This laboratory stems from the previous experience of the Living Lab between IT and CS, which allowed the experimentation and validation of advanced technologies for systems and data protection. Now, with an even more structured approach, the Joint Lab aims to strengthen digital security through applied research, development of innovative methodologies, and continuous training<\/strong>, supporting internal<\/strong> units and Services<\/strong> in identifying solutions to common problems through consolidated practices and training, stimulating awareness and knowledge sharing.<\/p>

The initiative is part of the broader context of the 2024-2027 Mandate Plan, with the aim of transforming the Joint Lab into a territorial reference hub<\/strong> capable of supporting public and private entities<\/strong> in managing cybersecurity challenges, contributing to building a secure local digital ecosystem<\/strong> that respects privacy and contributes to national and European resilience, thus responding to the increasingly high standards required and the complexity of the challenges posed by new technological and application scenarios.<\/p>

\u00a0<\/p><\/div>\n <\/div>\n <\/div>\n <\/div>\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t\t
\n
\n
\n
\n <\/object> <\/div>\n <\/div>\n <\/div>\n\t\t\t<\/div>\n\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n
\n
\n

\u00a0<\/p>

\u00a0<\/p>

Furthermore, on 13 April 2025, the Foundation received notification of inclusion in the list of entities subject to the European Directive NIS2<\/strong> (Network and Information Systems 2) n. 2022\/2555, implemented by Italy through legislative decree n. 138 of 2024 (so-called \"NIS2 Decree\"), and entered into force on 10\/16\/24.<\/p>

This legislation, which provides for the adoption of a common level of cybersecurity<\/strong> to strengthen the security of European critical infrastructure and digital services, has shifted the Joint Lab's priorities primarily towards compliance with the Directive, according to well-defined deadlines. These needs have seen the approval by the CdA and the related publication of Resolution 2025\/12 of 17 July 2025<\/a>, formally called Information Security Organization (OSI) in FBK<\/em><\/strong> which creates and defines the specific roles of CISO<\/strong> (Chief Information Security Officer in the person of Mirco Vivaldi<\/strong>) and CSRM<\/strong> (Cyber Security Risk Manager in the person of Matteo Rizzi<\/strong>), with the function of regulation, monitoring, vigilance, coordination and intervention in the prevention and management of incidents; this together with, among other entities, the Joint Lab for Cybersecurity, in technical support for the assessment of threats and vulnerabilities and in the provision of advice to the Centres for the definition of security by design projects and for awareness-raising and targeted training.<\/p>

The activities carried out by the Joint Lab are also part of the broader context of the new Sustainability Plan 25-27<\/a> (Data and Digital Infrastructure Security Pillar (D)) with the aim of:<\/p>