Italy’s cyber environment is still under strain in early 2026, but the move to regular incident notification is beginning to shape how defenders see, sort, and answer risk.