Italy is moving to make cyber capabilities a more explicit and structured component of its national defense architecture, with changes spanning command, governance, personnel and investment.
The big picture: The measures are part of a broader defense bill approved last week at a cabinet meeting chaired by Prime Minister Giorgia Meloni, on the proposal of Defense Minister Guido Crosetto.
- The bill, which must now go through Parliament, is designed to strengthen and adapt Italy’s defense capabilities to an environment in which military competition increasingly extends beyond the traditional land, sea and air domains.
What’s changing: One of the most consequential provisions formally defines a “cyberspace of national interest for the defense and military security of the State.”
- Its perimeter would be identified and updated by the Defense Minister.
- The provision gives the Italian military a more clearly defined area of responsibility in cyberspace while preserving the existing powers of other national authorities.
The governance piece. The Chief of the Defense Staff would become the Defense Ministry’s designated “cyber authority.”
- The same official would also assume “sole responsibility” for the ministry’s data, while leaving untouched the competences assigned by law to the Prime Minister, Interior Minister, intelligence agencies, National Cybersecurity Agency and Central Secrecy Office.
- The result is a clearer concentration of responsibility for cyber and data governance at the top of Italy’s military command structure.
The intelligence link. The bill also renames the Defense Staff’s current Intelligence and Security Department as the “Joint Cyber Intel Command,” explicitly incorporating cyber intelligence into the military intelligence architecture. But cyber intelligence is only one component of the broader system.
- The Cyber Intel Command’s intelligence function must be distinguished from military operations conducted in cyberspace, which fall under Italy’s Network Operations Command, or COR.
- Cyber intelligence focuses on collecting, analyzing and exploiting information on threats and actors operating in the digital environment. Cyber operations involve the operational use of military cyber capabilities under the authorities established by Italy’s defense framework.
The personnel problem: Rome is also trying to build and retain the human capital required to operate those capabilities. The bill creates a new military cyber specialist qualification, certified by the Chief of the Defense Staff.
- Cyber specialists would initially serve for five years, with the possibility of extending their service through additional two-year voluntary terms, up to a total of 13 years.
- The government is also putting money behind retention. Personnel would receive a €4,300 annual incentive for each voluntary two-year extension, while cyber operators would qualify for a specific allowance that can be combined with the existing monthly operational employment allowance.
Follow the money: The bill establishes a dedicated Cybersecurity Incentive Fund, with €1.574 million allocated for 2027 and €15 million annually starting in 2036.
- The funding is relatively limited in the immediate term, but its inclusion in the legislation signals an attempt to institutionalize cyber expertise rather than treat it simply as an additional skill within the existing military workforce.
Why it matters: Modern defense increasingly depends on the ability to connect conventional military power with intelligence, networks, data and digital resilience. The Italian plan reflects that shift.
- Rather than creating a single new cyber organization, the bill seeks to strengthen several layers of the military cyber ecosystem at once: defining the relevant domain, clarifying who is responsible for it, reorganizing cyber intelligence, and creating incentives to recruit and retain specialized personnel.
- It also fits into a broader effort to make the Italian armed forces more joint and multidomain in their organization and operations.
The bottom line: Italy’s proposed reform treats cyber less as a specialist support function and more as a permanent component of military power.
- But the direction is clearer than the final architecture. The legislation still faces parliamentary scrutiny, and much of its practical impact will depend on subsequent implementation — including how responsibilities, structures, personnel and operational procedures are ultimately defined.
