🇮🇹 Italy

FNCS — Italy's National Cybersecurity Framework

The Italian national framework built on the NIST CSF, helping organisations structure and measure their cyber posture.

What is FNCS?

The Framework Nazionale per la Cybersecurity (FNCS) is Italy's national cybersecurity framework, derived from the NIST Cybersecurity Framework and developed by CIS-Sapienza and the CINI Cybersecurity National Lab with support from the national cybersecurity agency (ACN). Its current edition is titled "Framework Nazionale per la Cybersecurity e la Data Protection", adding GDPR-aligned data-protection controls.

It organises cybersecurity around the NIST CSF functions and is a practical structure for Italian organisations preparing for NIS2 and aligning with ISO 27001.

FNCS structure (NIST CSF based)

Identify & Protect

Asset and risk management, access control, awareness, data and protective technology.

Detect

Continuous monitoring and anomaly detection.

Respond & Recover

Incident response, communications, recovery planning and improvement.

FNCS with ResiPlan

ResiPlan includes a structured FNCS baseline and runs a maturity GAP analysis with evidence and reporting.

Cross-mapping links FNCS to ISO 27001 and NIS2 — assess once, reflect your posture everywhere.

See all 10 covered frameworks The cross-mapping engine

Frequently asked questions

What is the FNCS?

The Framework Nazionale per la Cybersecurity: Italy's national cybersecurity framework, based on the NIST CSF and adapted for Italian organisations.

Does FNCS map to ISO 27001 and NIS2?

Yes. Being NIST-CSF-based, FNCS maps to ISO 27001 and NIS2; ResiPlan cross-maps them so one assessment serves several frameworks.

Other frameworks

ResiPlan covers 10 frameworks with cross-mapping: assess once, prove everywhere.

ISO 27001 NIS2 DORA 🇳🇱 CYRA 🇧🇪 CyFun 🇩🇪 BSI IT-Grundschutz 🇳🇱 BIO 🇫🇷 ANSSI 🇪🇸 ENS

Assess your FNCS compliance

Run a maturity gap analysis, attach your evidence and generate a report — with cross-mapping to the other frameworks.