G/TBT/N/ITA/35  
23 August 2019  
(19-5437) Page: 1/2 
Committee on Technical Barriers to Trade  Original:  English  
 
  NOTIFICATION  
The following notification is being circulated in accordance with Article 10.6  
 
1. Notifying Member:  ITALY   
If applicable, name of local government involved (Article 3.2 and 7.2):   
2. Agency responsible:  Ministero dello sviluppo economico  
Name and address (including telephone and fax numbers , email and website 
addresses, if available) of agency or authority designated to handle comments 
regarding the notification shall be indicated if different from above:   
Ministry for e conomic development  
General Directorate for Market, Competition, Consumer, Vigilance and Technical 
Regulations  
Division XIII - Technical regulation  
00187 Rome I – Via Sallustiana, 53  
tel. +39 06 4705.5330 -.5368  
tbt.italia@mise.gov.it   
ucn98.34.italia@mise.gov.it  
 
European Commission TBT Enquiry Point: GROW -EU-TBT@ec.europa.eu    
3. Notified under Article 2.9.2 [X], 2.10.1 [   ], 5.6.2 [   ], 5.7.1 [   ], other :  
4. Products covered (HS or CCCN where applicable, otherwise national tariff 
heading. ICS numbers may be provided in addition, where applicable):  ICT 
products and services  
5. Title, number of pages a nd language(s) of the notified document:  Security in ICT 
Procurement (30 page(s), in Italian)  
6. Description of content:  The Guidelines are a document drawn up by a working group 
promoted by the Cyber Security Unit [NSC] of the Security Intelligence Depar tment [DIS] 
at the Office of the Prime Minister [PCM], which approved its drafting. In addition to the 
DIS, the Department of Civil Protection, the Ministry of Foreign Affairs [MEA], the Ministry 
of the Economy and Finance [MEF], the Ministry of Economic D evelopment [MiSE], the 
Agency for Digital Italy [AgID], Consip, the Ministries of the Interior, of Justice and of 
Defence contributed to the document.  
The Guidelines collect technical -administrative recommendations, best practices and 
operational tools (wi th examples to facilitate their use) to ensure, within the procedures for 
the procurement of IT goods and services of public administrations, the compliance of the 
latter with adequate security levels.  
7. Objective and rationale, including the nature of urgent problems where 
applicable:  The draft Guidelines covered by this notification are necessary to verify the 
security level of the current acquisition processes and possibly to raise this level without 
thereby excessively increasing the comple xity of the processes and the effort required to 
conduct them.  G/TBT/N/ITA/35  
 
- 2 - 
 
  8. Relevant documents:   
References to basic texts:  
- ISO 22317 - Guidelines for business impact analysis:  
https://www.iso.org/standard/50054.html;  
- ISO 27001 - Information security management systems:  
https://www.iso.org/isoiec -27001-information -security.html;  
- ISO 31000 Risk management:  
https://www.iso.org/iso -31000 -risk-management.html;  
- Guidelines for secure software development:  
https://www.agid.gov.it/it/sicurezza/cert -pa/linee -guida -sviluppo -del-software -sicuro;  
- AgID Minimum security measures:  
https://www.agid.gov.it/it/sicurezza/misure -minime -sicurezza -ict; 
- ISO 15408 Standard Common Criteria:  
https://www.iso.org/standard/50341.html . 
9. Proposed date of adoption:  November 2019  
Proposed date of entry into force:  November 2019  
10. Final date for comments:  11 November 2019  
11. Texts available from:  National enquiry point [ ] or address, telephone and fax 
numbers and email and website addresses, if available , of other body:   
Ministry for economic development  
General Directorate for Market, Competition, Consumer, Vigilance and Technical 
Regulations  
Division XIII - Technical regulation  
00187 Rome I – Via Sallustiana, 53  
tel. +39 06 4705.5330 -.5368  
tbt.italia@mise.gov.it   
ucn98.34.italia@mise.gov.it  
 
https://members.wto.o rg/crnattachments/2019/TBT/ITA/19_4625_00_x.pdf  
 
European Commission TBT Enquiry Point: GROW -EU-TBT@ec.europa.eu  
 
Text on line at: http://ec.europa.eu/growth/tools -databases/tris/en/search  (Notification 
number: 2019/399/I)  
and/or at: http://ec.europa.eu/growth/tools -databases/tbt/en/search