How to Become Digital Data Conservators
The Circular no. 65/2014 (G.U. no. 89 of 16/04/2014) by AgID outlines the process that allows companies or individuals to become conservators of digital documents for public administration.
The process of AgID conservator accreditation not only involves validation of numerous requirements but also includes annual checks by AgID and a biennial renewal of the role of AgID accredited conservators.
The purpose of this process is to protect public administration data according to strict security standards due to the sensitive nature of the data.
The AgID conservator accreditation process requires companies or individuals to meet requirements that cover:
Corporate organization
Adopted procedures
IT infrastructures
In particular, professional evaluations of the IT system's security are required.
What does the accreditation process involve?
The AgID conservator accreditation process involves submitting an accreditation request form. Following the application, AgID (or accredited bodies) will conduct an inspection to verify compliance with the requirements defined in the circular.
After obtaining accreditation, to maintain the title of AgID accredited conservators, it is necessary to produce detailed reports of activities carried out and undergo annual checks to assess compliance with regulations. It is also necessary to renew the accreditation biennially.
To meet all the requirements, the company must adhere to strict organizational and procedural standards; it must also subject its IT infrastructures to a security and robustness evaluation. Specifically, IT infrastructures must undergo a Vulnerability assessment and/or Penetration Testing by professionals.
How can ISGroup help?
ISGroup, with its experience in regulatory matters gained over years of activity in the field of IT security, can guide companies in interpreting regulations and devising targeted interventions to address company deficiencies.
Additionally, ISGroup can carry out Vulnerability assessments and Penetration tests to check the quality of network configurations and assess the actual protection of the infrastructure from cyber attacks.
