RTI stands for raggruppamento temporaneo di imprese, a temporary grouping of companies used in public procurement and complex contracts. Multiple firms join forces to bid or deliver a service, while each company keeps its own legal identity. In practice, an RTI can include a lead company and one or more partners with different roles, skills, or delivery responsibilities.
RTI matters in cyber security because it can blur accountability. Security requirements, incident reporting duties, access controls, and evidence collection may be split across several entities, making it harder to show who owns each control. In third-party risk management, defenders should map the RTI structure, identify the party responsible for security oversight, and verify that contract clauses assign clear obligations for monitoring, response, and subcontractor changes. Without that clarity, a contract may look complete while the actual control chain remains weak.