We defined and implemented procedures, operational models, and organizational structures to protect business activities, ensuring compliance with the regulatory framework of Decree Law 231/2001 and key European regulations, including the Data Act, Digital Services Act, AI Act, and cybersecurity regulations, with a specific focus on compliance with D.P.C.M. July 22, 2011.

Starting from general policies and risk mitigation models, we defined operational instructions and codes of conduct for staff, and adjusted clauses and obligations in regulatory documents related to the company’s contractual relationships.

We established and trained working groups composed of senior management, tasked with overseeing and managing critical issues, with the aim of ensuring adequate resilience levels. Our activities helped the company strengthen the protection of its tangible and intangible assets, overcome operational challenges, and successfully complete certification and compliance processes.

We managed the definition of business procedures for internal audits, ensuring compliance with obligations arising from various regulatory sources. We also produced instructions and models for analysis, training, and the production of digital evidence (digital forensics), supporting the company’s legal practices.

These activities provided concrete tools for effective and secure operational management, ensuring compliance with the required confidentiality, accuracy, timeliness, and precision standards for the company’s most sensitive operations.