Mauro M.

The fourth edition of the #G7 #Privacy #DataProtectionAuthorities (#DPAs) took place in Rome 🇮🇹 on 9-11 Oct and just ended today. The main focus was on three major issues: 1️⃣ data #free flow with #trust 2️⃣ implications of #emergingtechnologies 3️⃣ #coordinated #enforcement efforts. The group also held discussions about the #ethical and #trustworthy development of #AI and all the #G7 #DPAs also committed to the new 2024-25 action plan. Below and for further details you will find the link to the EDPS - European Data Protection Supervisor and the Italian DPA, Autorità Garante per la protezione dei dati personali, authority press releases 👉https://lnkd.in/d7YVDHWa 👉 https://lnkd.in/gfc-QErC

7

A breve sul mio blog. Stay tuned!😀 #intelligenzaartificiale #truffe #noisicurezza

1

A breve sul mio blog. Stay tuned!😀 #IntelligenzaArtificiale #shadowai #noisicurezza

3

Thrilled to share insights from a recent meeting at the Konrad Adenauer Academy on Lake Como, where data protection was a central theme in discussions around AI's emerging challenges and the role of authorities. Key takeaways include the Italian and German Data Protection Authorities collaborating to address AI's new ethical and privacy complexities. Discussions ranged from protecting minors in digital spaces to the practicalities of implementing effective verification mechanisms to ensure data accuracy and equity. A standout moment was the examination of strategies to confront AI-related issues, with a focus on aligning with GDPR and centralizing the role of AI within regulatory frameworks. The European Data Protection Board's (EDPB) perspective on 'pay or consent' practices in online platforms was also a highlight, aiming for transparency in data usage and the potential for opting out without facing penalties. These are exciting times as we lay down the groundwork for the future of AI governance, ensuring it aligns with our values and legal frameworks. #ArtificialIntelligence #DataProtection #GDPR #DigitalEthics #AIgovernance #EDPB ---

2

What lessons can #fincrime professionals take from law enforcement agencies? In this #regtechpulse episode, Riccardo Domini of Satispay shares his experiences of working for #Interpol, how they apply to financial crime compliance, and the crucial role of public/private partnerships.

2

Trick or treat? Unfortunately when it comes to scammers, it’s Halloween all the year and they don’t definitively leave a choice to their victims, it’s always a trick. #cybersecurity is a serious matter and, in ING Italia, the safety of our customers is at the heart of everything we do. So, if scammers find new ways to cheat, we get smarter and find new solutions and louder ways to rise the awareness on this topic. That’s how our new social media campaign was born: NO TRAP is just the first song of a full album, composed by 5 songs which are going to be released in the next weeks. Each song will focus on a different cyber crime, and will use different music styles to reach and engage the broader audience possible. From trap to neo-melodic, discover all the titles on our Spotify channel, YouTube and Socials (we will release them one by one in the next weeks). I’m so proud of all the team, but especially of Elisa Pavan who has brilliantly designed this campaign together with Caffeina | Ideas Never Sleep., our social media agency! Truffatori, bye bye #ingitalia #cybersecurity #notrap #socials

20

1 commento

#CyberAttack #Italy: Università degli Studi di Siena has been compromised by the LockBit 3.0 ransomware group. The group allegedly exfiltrated 514 GB of sensitive documents, including: - Documents with budgets detailing expenses by month from 2020 to 2024 - Documents approved by the Board of Directors regarding the financing of projects and tenders from 2022 to 2026, including financing amounts - Documents on extraordinary construction works, the appointment of the contractor, and the allocation of a budget of 1.7 million euros - Non-disclosure documents for WineCraft 2024 - Tender design contracts for 2023, including the contract budget - Documents outlining the contractor's investment plan for 2022, including expenses, rents, and the general financial plan Ransom deadline: 28th May 24. On May 10, the University of Siena's website communicated that due to a massive cyber attack by an international group of hackers, the website admission[.]unisi[.]it, the ticketing service, and the payment management services linked to international admissions are currently suspended. The technical team, supported by the National Cybersecurity Agency, is progressively restoring all services. Read more: https://lnkd.in/dKEFVWtp #Ransomware #DataBreach

4

Italy's National Cybersecurity Agency, Agenzia per la Cybersicurezza Nazionale, released a guide for compliance with its #cyberincident notification procedure. The process include a: 👉 #preparation phase that aim to collect the initial sufficient information about the incident event 👉 #reporting phase using this form https://lnkd.in/di_zC8iy 👉#notificationmanagement phase with the #incident handling operations by #CSIRT Italian stuff to support victims with effective containment and restoring actions until incident is #closed Even if not mandatory, the guidelines 👉https://lnkd.in/dic3wYz3 are certainly of interest of all public and private organizations that intend to voluntarily report the incident to the #CSIRT to contribute and share current threat knowledge and strengthen the resilience of the #Italiandigitalecosystem. As not mandatory the risk for an initial low adoption is concrete, especially considering the different cross obligations (incl. #GDPR). An incentive could be the fact that these guidelines will be a good starting point and basis as the national implementation of the European #NIS2 directive will come. #shareknowledge #notbeafraidtoshare #digitalresiliance

8

1 commento

President Gian Maria Gros-Pietro spoke at the B7 Summit organized by Confindustria and indicated 3 priorities for sustainable growth of the world economy, capable of shaping a fair future for society at the same time: strengthening global value chains, to make them more sustainable and competitive, encouraging the participation of small and medium-sized enterprises, creating sustainable infrastructure, serving quality of life and cultivating talent through inclusive and high-quality education. According to Gros-Pietro "Banks have the responsibility to accelerate alternative investments with an impact on the real economy to allow the implementation of international projects capable of generating social and/or environmental as well as financial returns". Find out more about the intervention: https://ow.ly/lB3Z30sCKo2

4

Thanks Guido Bertoni, the management of #vulnerabilities, is becoming compulsory. ...and not only from the regulatory perspective. There's a solution made by Security Pattern for embedded systems manufactorers. Its name is ARIANNA! https://lnkd.in/d2m7Yzxn A good solution to save 900k in a flash...

11

The recent cyberattack on ASST Rhodense by the ransomware group Cicada3301 has once again highlighted the vulnerabilities of Italian healthcare institutions. The theft of 1 terabyte of sensitive data, published entirely on the criminal group's Data Leak Site, underscores the urgent need to strengthen cybersecurity measures, as highlighted by the #NIS2 regulation. In a context where knowing the "demons" is essential to counter them, a comprehensive Identity and Access Management (IAM) solutions can protect healthcare organizations from increasingly sophisticated threats with: - Multi-Factor Authentication (MFA): Implement additional layers of security to ensure that only authorized users can access critical systems. - Single Sign-On (SSO): Reduce the risk of phishing attacks and simplify user access while enhancing security. - Zero Trust Security: Adopt a security approach that requires continuous verification of identities and devices, reducing the risk of unauthorized access. - Compliance and Governance: Ensure that access policies are consistently applied and compliant with data protection regulations. #CyberSecurity #HealthcareSecurity #IAM #PingIdentity #DataProtection #ZeroTrust #MFA #SSO

9

🌟 I am thrilled to announce the launch of 𝐌𝐢𝐭𝐢𝐠𝐚𝐭𝐞, the new anti-money laundering SAAS that I help founding! 𝐌𝐢𝐭𝐢𝐠𝐚𝐭𝐞 offers: 🔍 𝐂𝐨𝐦𝐩𝐫𝐞𝐡𝐞𝐧𝐬𝐢𝐯𝐞 𝐃𝐮𝐞 𝐃𝐢𝐥𝐢𝐠𝐞𝐧𝐜𝐞: Thorough client background checks 🔒 𝐌𝐚𝐱𝐢𝐦𝐮𝐦 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲: Advanced protection for sensitive data ⚡ 𝐑𝐚𝐩𝐢𝐝 𝐎𝐩𝐞𝐫𝐚𝐭𝐢𝐨𝐧𝐬: Automated and intuitive verification processes 🌐 𝐆𝐥𝐨𝐛𝐚𝐥 𝐂𝐨𝐦𝐩𝐥𝐢𝐚𝐧𝐜𝐞: Solutions aligned with international regulations Learn more and request a free demo today! #Mitigate #AntiMoneyLaundering #Compliance #SAAS #Security #Innovation

13

🚨CONDIVIDETE, POTREBBE ESSERE UTILE Un'interruzione diffusa di Windows è l'ultima cosa di cui le aziende hanno bisogno di venerdì. Ecco come uscire dalla BSOD a seguito dell'aggiornamento di Crowdstrike: 1. Riavviare Windows e avviare in modalità provvisoria 2. Aprire un prompt dei comandi 3. Andare su C:\Windows\System32\drivers\CrowdStrike 4. Individuare il file che corrisponde a "C-00000291*.sys" ed eliminarlo. - (In alternativa: rinominare il file CSAgent.sys in qualcos'altro, ad esempio donotcrash.sys) 5. Continuare l'avvio normale Grazie a tutti per l'attenzione e la condivisione! #CrowdStrike

2

The Italian Data Protection Authority has approved #codes of #conduct acc. Art. 40 EU Regulation 2016/679 #GDPR for #software, including #cloudservices, based on #ISO27002, #ISO27701 and others. #dataprotection #privacy #informationsecurity #ITservice #IT #cloud

2

🚀 IT-Wallet: A Step Forward in Italy’s Digital Evolution 📲 These days are marking a significant milestone for Italy’s digital transformation: the IT-Wallet, integrated into the IO app, allows 50,000 citizens to store key documents like their driver’s license, health card, and European Disability Card on their smartphones. By December, this service will be available to everyone. In this first stage IT-Wallet is optional! 🌐: you can still use physical documents if you prefer—no one is being forced into this digital transition. The idea is to offer flexibility, not to impose. With the rise of conspiracy theories around digital control, it’s important to emphasize that safety is a top priority. Every document uploaded is secured through SPID and CIE, ensuring robust data protection; plus, months of testing by technical experts have confirmed its efficacy and security. This is a step toward a future where managing personal documents becomes easier and more convenient, without leaving anyone behind. #DigitalTransformation #ITWallet #DataSecurity #PublicAdministration #SPID #DigitalItaly https://lnkd.in/dq-FCyJv

4

🛠️ Italy’s Financial Intelligence Unit has just published a new study titled “Corruption risk indicators in public procurement: A proposal using Italian open data” by Mario Gara, Stefano Iezzi and Marianna Siino. Public procurement is one of the most vulnerable sectors to corruption, involving significant resources and often linked to organized crime. This study introduces an innovative system of **risk indicators** based on public data from the **Italian National Anti-Corruption Authority (ANAC)**, aimed at identifying potential corrupt behaviors in public tenders. 🔍 The indicators measure corruption risk across various aspects of tenders, and by aggregating the data, they provide a risk measure at the award, contracting authority, and contractor levels. Additionally, through access to confidential data from the **Financial Intelligence Unit (UIF)**, the system has undergone thorough validation. 💡 Potential operational applications include: - Continuous monitoring of tenders and procurement processes - Support for anti-money laundering activities - Enhanced transparency and corruption prevention practices #corruption #publicprocurement #riskindicators #ANAC #UIF #organizedcrime

35

1 commento

🇮🇹 The Ministero dell'Interno has presented the report on the activities and results achieved by the Anti-Mafia Investigation Directorate (#DIA) in the first half of 2023. The #report provides an in-depth analysis of organized crime of a mafia nature in Italy, highlighting the evolution of #mafia strategies and the use of technology for #illicitactivities. The report, restructured for greater readability, is accompanied by a "Summary" to facilitate a quick understanding of the main conclusions. The analysis reveals that mafia organizations continue to adapt to socio-economic changes, favoring silent infiltration and corruption strategies over violence. Investigations have highlighted the importance of #drugtrafficking as the main source of income for criminal cartels, with a growing internationalization of activities. Mafia organizations establish relationships with major foreign drug traffickers to create new supply channels. Significant is also the infiltration of mafias into public administration, with dissolution measures for mafia infiltration affecting six municipal administrations in Southern Italy. The report exceeds 300 pages, making it too extensive for full sharing on LinkedIn. However, it can be downloaded in its entirety through this link: https://lnkd.in/et-prZvu #aml #compliance #antimoneylaundering #dirtymoney

43

2 commenti