IT EN
Client Portal →
sales@10punto10.eu · 02 87176855

Last updated: March 2026

Cybersecurity solutions for public administration and NIS2 compliance
Public Administration · Check Point

Public bodies are
under attack. NIS2
won't wait.

Italian public entities are prime targets for cyberattacks. Under D.Lgs. 138/2024, NIS2 compliance is mandatory. 10punto10 protects your organization with Check Point Infinity, 24/7 monitoring and PNRR-funded compliance pathways.

Free assessment for your entity → PA cybersecurity challenges
NIS2 Compliant Check Point Infinity PNRR Ready NEXUS Integrated

Digital government
means exposed government

Municipalities, provinces, healthcare authorities and schools manage the most sensitive citizen data in Italy: civil registry, taxes, medical records, student data. They often do so with legacy infrastructure, flat networks and staff untrained in cybersecurity.

NIS2 (D.Lgs. 138/2024) classifies public administration entities as essential or important subjects: compliance is no longer optional. Ransomware attacks on Italian public entities have increased 65% in the last two years.

65%
Increase in ransomware attacks on Italian PA (2023-2025)
NIS2
D.Lgs. 138/2024: PA entities are essential or important subjects
PNRR
Measure 1.5: dedicated funding for PA cybersecurity
24/7
NOC10 monitors, detects and responds around the clock

Who we help

Our solution is designed for Italian public administration entities that need to protect citizen data, comply with NIS2 and modernize their IT infrastructure using PNRR funding.

You don't need a dedicated internal security team: our NOC manages everything, from deployment to monitoring, from incident response to ACN reporting.

🏛️
Municipalities and municipal unions Protection of civil registry, tax and demographic service data
🏢
Provinces and metropolitan cities Network segmentation, distributed offices and secure remote work
🏥
Healthcare authorities and hospitals Citizen health data, NIS2 essential sector compliance
🎓
Schools and universities Student data, campus networks, e-learning platforms and research

How we protect your organization

Every area of public administration has specific risks. We address each one with Check Point Infinity architecture, managed by our NOC and monitored on NEXUS.

01

NGFW perimeter protection

PA web portals, citizen-facing online services and internal networks are exposed to intrusions, DDoS and lateral movement. Check Point Quantum protects the perimeter with next-generation firewalls, IPS and integrated threat prevention.

  • Check Point Quantum NGFW
  • IPS and Threat Prevention
  • Internal network segmentation
02

Endpoint and anti-phishing

PA employees receive hundreds of emails daily and don't always distinguish legitimate messages from phishing attempts. Check Point Harmony protects endpoints and email with AI anti-phishing, attachment sandboxing and DLP for citizen data.

  • Check Point Harmony Endpoint
  • Anti-phishing and anti-BEC
  • DLP for sensitive PA data
03

Distributed offices and remote work

Provinces with dozens of branch offices, municipalities with field offices, employees working remotely: the attack surface is enormous. Check Point Harmony SASE provides secure connectivity anywhere, with zero-trust network access and web protection.

  • Check Point Harmony SASE
  • Zero Trust Network Access
  • Web and SaaS protection
04

PA cloud and ACN qualification

PA cloud migration requires ACN-qualified solutions. Check Point CloudGuard protects cloud workloads with posture management, network security and automated compliance for PA cloud infrastructure.

  • Check Point CloudGuard
  • Cloud Security Posture Management
  • ACN automated compliance
05

NOC10: 24/7 monitoring

Public administration cannot afford slow response times. Our NOC monitors the entire infrastructure 24/7/365, detects threats in real-time and intervenes before an incident becomes a crisis. Complete incident management and CSIRT notifications.

  • 24/7/365 monitoring
  • Incident response < 1 min
  • CSIRT/ACN notifications

For Check Point technology details: Check Point partner page →  |  For NIS2 compliance: NIS2 guide →

NIS2 + PNRR

Legal obligation.
Funding opportunity.

D.Lgs. 138/2024 transposes the NIS2 directive into Italian law. PA entities are classified as essential subjects (large entities, healthcare, transport) or important subjects (municipalities, local authorities). Compliance with Art. 24 security measures is mandatory by October 2026.

PNRR Measure 1.5 allocates dedicated funding for PA cybersecurity. 10punto10 supports your entity with gap analysis, implementation roadmap, technology deployment and CSIRT Italia notification procedures.

Learn more about NIS2 →
Art. 24
Mandatory security measures for PA under NIS2
M 1.5
PNRR Measure 1.5: PA cybersecurity funding
2026
Deadline for full NIS2 compliance
Integrated in NEXUS

Your entity's security posture
always under control

Every Check Point alert, every NOC intervention, every status update: all visible in real-time on NEXUS. Dedicated dashboard with PA security metrics and NIS2 compliance status.

Automatic monthly reports for the security officer and potential ACN audit.

Discover NEXUS →
Live
Real-time PA security dashboard
NIS2
Art. 24 compliance status always updated
PDF
Monthly reports for management and ACN audit

Frequently asked questions

Is my public entity required to comply with NIS2?
Very likely yes. D.Lgs. 138/2024 classifies central administrations, regions, healthcare authorities and health entities as essential subjects. Municipalities with more than 50,000 inhabitants, provinces and metropolitan cities fall under important subjects. Even smaller entities may be included if they provide critical services or are part of an essential subject's supply chain. We offer a free compliance check.
How can I fund cybersecurity through PNRR?
PNRR Measure 1.5 allocates specific funding for PA cybersecurity. The funding covers security solution procurement, managed services and staff training. 10punto10 supports you in drafting the project proposal, selecting eligible solutions and implementing within the call deadlines.
How long does it take to achieve compliance?
It depends on your current infrastructure state. For an entity with basic infrastructure, the complete pathway typically takes 3-6 months: gap analysis (2 weeks), compliance roadmap (2 weeks), technology implementation (2-4 months), staff training (ongoing). The NIS2 deadline is October 2026, but we recommend starting immediately.
Can we outsource security management?
Yes, and for many entities it's the most effective choice. Our NOC manages the entire security infrastructure 24/7: monitoring, detection, response, updates, patch management and reporting. Your entity maintains strategic control via NEXUS while we handle day-to-day operations. This model is already adopted by dozens of Italian public entities.
Is Check Point qualified for public administration?
Yes. Check Point solutions are listed in the ACN catalog (formerly AgID) for cloud service qualification and security solutions for PA. Check Point is a leader in Gartner's Magic Quadrant for Network Security and has thousands of public sector installations globally.

Request a free assessment for your entity.

30-minute call: we analyze your infrastructure, verify your NIS2 position and propose a Check Point compliance roadmap. No commitment.

Request free assessment → 📞 +39 02 87176855