Choosing the qualified provider
In brief
To migrate to the cloud, public administrations choose a provider qualified by the Agenzia per la Cybersicurezza Nazionale (ACN).
Qualification ensures that services meet the security, reliability, and data localization requirements set out by the Italian Cloud Strategy.
Roles and responsibilities
-
Public Administration
It chooses from the ACN Catalog the provider best suited to its migration needs.
Where to do it
How to proceed
Follow these steps to choose a qualified provider.
- Consult the ACN Catalog
Consult the ACN Catalog to identify providers offering services compatible with the requirements of your migration plan.
Use filters for service type (IaaS, PaaS, SaaS), security level, and data location.
Check that the ACN qualification of the service is active and valid on the date you sign the contract.
- Verify contract compliance
Before proceeding with the purchase, ensure that the contract includes all required elements: references to the ACN qualification, service levels (SLAs), security measures, data management and return procedures, duration, and renewal conditions
- Monitor the qualification over time
During the term of the contract, periodically check that the provider’s qualification remains valid in the ACN catalog. If the qualification expires or is suspended, consult ACN and the provider to determine the necessary actions to ensure service continuity and security.