ACN (Italy)

The Italian National Cybersecurity Agency, Agenzia per la Cybersicurezza Nazionale (ACN) defines the rules for protecting the Italian government and public administration’s assets in the cybersecurity space. The ACN's Cloud Qualification Rules (CQRs), specify mandatory requirements applicable on the three defined tiers of data classification:

• Ordinary
• Critical and,
•  Strategic

To host Italian Public Sector data of a given classification level, all the corresponding requirements, for both the Cloud infrastructure and the Cloud Services must be met. The higher the classification level, the stricter the requirements.

Google Cloud has achieved the level-2 qualification for Ordinary and Critical data, for the Infrastructure and for a set of Google Cloud services and Google Workspace.

Google Cloud Infrastructure and qualified services are published in ACN’s Catalog of Digital Infrastructures and Cloud Services on their website.