A new Italian decree is being read as a governance signal: digital risk is moving from specialist teams into the same oversight framework used for controls, disclosure and corporate accountability.