What is FNCS?
The Framework Nazionale per la Cybersecurity (FNCS) is Italy's national cybersecurity framework, derived from the NIST Cybersecurity Framework and developed by CIS-Sapienza and the CINI Cybersecurity National Lab with support from the national cybersecurity agency (ACN). Its current edition is titled "Framework Nazionale per la Cybersecurity e la Data Protection", adding GDPR-aligned data-protection controls.
It organises cybersecurity around the NIST CSF functions and is a practical structure for Italian organisations preparing for NIS2 and aligning with ISO 27001.
FNCS structure (NIST CSF based)
Identify & Protect
Detect
Respond & Recover
FNCS with ResiPlan
ResiPlan includes a structured FNCS baseline and runs a maturity GAP analysis with evidence and reporting.
FNCS is assessed on its own: ratings from ISO 27001 or NIS2 do not carry over.
Frequently asked questions
What is the FNCS?
The Framework Nazionale per la Cybersecurity: Italy's national cybersecurity framework, based on the NIST CSF and adapted for Italian organisations.
Does FNCS map to ISO 27001 and NIS2?
Being based on NIST CSF, FNCS overlaps with ISO 27001 and NIS2. In ResiPlan it is assessed separately: ratings do not carry over.