Skip to content

Secure Public Cloud

Polo Strategico Nazionale has developed a dedicated cloud service designed to manage critical data. Secure Public Cloud leverages leading hyperscale cloud providers — Microsoft Azure, Google Cloud, AWS and Oracle — while implementing encryption keys managed exclusively by Polo Strategico Nazionale.

This encryption mechanism provides Public Administrations with the highest level of cybersecurity. Secure Public Cloud also ensures that data and applications are hosted exclusively in Regions located within Italy.

image

Data Sovereignty and Security: The Key Strengths of Secure Public Cloud

Secure Public Cloud is built on two fundamental principles: security, ensured through data encryption, and sovereignty, maintained by ensuring that all operations are carried out exclusively within Italy.

image

Three Core Pillars of Secure Public Cloud Security

  • Encryption Key Management. All Public Administration workloads are encrypted using BYOK (Bring Your Own Key) and HYOK (Hold Your Own Key) master encryption keys. These keys are owned by the Public Administrations but managed by Polo Strategico Nazionale and stored in data centres located within Italy.

  • Cybersecurity Posture Management. Cybersecurity measures are tested and implemented according to the specific requirements of each Public Administration. Security operations follow industry-leading best practices and established cybersecurity frameworks.

  • Network Management. All network traffic is monitored through a Hub-and-Spoke architecture, enabling centralised traffic inspection and security controls using firewalls, Web Application Firewalls (WAFs) and Security Information and Event Management (SIEM) solutions.

Strategic Measures to Ensure Data Sovereignty:

  • Strict Data Residency and Service Selection Policies. A strict policy requires all workloads to be hosted exclusively in Italian data centres operated by the selected public cloud provider. Furthermore, only services that meet the required security standards and support external encryption key management systems can be enabled.

  • Dual Backup Strategy. Backups are maintained both in Polo Strategico Nazionale’s data centres and within Public Administration infrastructures, ensuring redundant copies of applications and supporting data resilience.