A società in-house is a publicly controlled company created to provide services for municipalities or other public bodies. It usually operates within the public perimeter, meaning the owners retain strategic control, oversight, and accountability. Common uses include shared IT platforms, infrastructure, utilities, and digital services.
In cyber security, this model matters because control changes the threat surface. A municipal in-house provider can improve trust, auditing, and data residency by keeping systems and sensitive records under public governance. But consolidation also creates shared risk: one weak identity policy, unpatched server, or poor backup practice can affect several administrations at once. Defenders therefore need strong segmentation, logging, access control, recovery planning, and clear ownership. Attackers may target these entities as a central point of compromise to reach multiple public services through one supplier or platform.