STAR Registry Listing for
Secure Public Cloud
Secure Public Cloud
Polo Strategico Nazionale has created an ad hoc cloud service for the management of critical data. Secure Public Cloud uses Google Cloud, Azure Cloud and AWS with the implementation of cryptographic keys managed, exclusively, by Polo Strategico Nazionale, in Regions located only on Italian territory. Service to guarantee the security and sovereignty of the data through:
- The encryption keys. All Public Administration workloads are encrypted with BYOK master keys. The codes are owned by the PA, but managed by Polo Strategico Nazionale and located within the Data Centers located on Italian territory;
- Cyber Security Postures tested and implemented on the specific needs of each Administration. Security operations follow the main best practices and reference frameworks;
- Networking Management because all traffic is monitored through a Hub & Spoke architecture which allows you to control data via firewall, waf and siem;
- The strict policy that imposes workloads only in Italian Data Centers of the selected Public Cloud. Furthermore, the only services that can be activated are those that meet security standards with external key management systems;
- Double backup series. Backups are provided both in the Data Centers of the National Strategic Center and in the Public Administration infrastructures to guarantee dual conservation of the applications.
View other services by Polo Strategico Nazionale:


Listed Since: 04/22/2024
Last Updated: 04/17/2025
STAR Level 1
Self-Assessment & Partner-Provided

CAIQ Self-assessment v4.0.3
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
STAR Level 2
Third-Party Audit
Organizations looking for a third-party audit can choose from one or more of the security and privacy audits and certifications.

STAR Certification (CCMv4)
A technology-neutral certification leveraging the requirements of the ISO/IEC 27001 management system standard together with the CSA Cloud Controls Matrix (CCM).