{"id":3313,"date":"2026-10-15T11:44:32","date_gmt":"2026-10-15T09:44:32","guid":{"rendered":"https:\/\/www.pfadvisory.it\/?p=3313"},"modified":"2026-10-15T11:44:33","modified_gmt":"2026-10-15T09:44:33","slug":"la-governance-del-rischio-nellimpresa-contemporanea","status":"publish","type":"post","link":"https:\/\/www.pfadvisory.it\/en\/la-governance-del-rischio-nellimpresa-contemporanea\/","title":{"rendered":"Risk Governance in the Contemporary Enterprise"},"content":{"rendered":"<h2 class=\"wp-block-heading\">1. When Cyber Risk Becomes Business Risk<\/h2>\n\n\n\n<p class=\"wp-block-paragraph translation-block\">A cyber incident can disrupt production, interrupt essential services, expose strategic information, and generate economic, reputational, and regulatory consequences.\nYet cybersecurity is still often viewed as a predominantly technical responsibility, delegated to IT functions and assessed through the presence of tools and controls.\nThis approach is no longer sufficient.\nCloud technologies, artificial intelligence, interconnected systems, and technology suppliers have expanded the exposure perimeter, making it increasingly difficult to separate digital risk from operational and strategic risk.\nCyber risk is no longer just about protecting systems \u2014 it concerns the organization\u2019s ability to continue operating under adverse conditions.\nIt is this transformation that makes the evolution of governance necessary.<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">2. From Cybersecurity to Risk Governance<\/h2>\n\n\n\n<div style=\"height:14px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">2.1. Integrating Cyber Risk into Corporate Decision\u2011Making<\/h3>\n\n\n\n<div style=\"height:10px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph translation-block\">Cyber maturity is not measured solely by the number of controls implemented or by the absence of incidents. It also depends on the ability to identify relevant exposures, assess their impact on the business, and make decisions aligned with the organization\u2019s risk profile.\nCyber risk management must therefore be integrated into Enterprise Risk Management (ERM), investment planning, and internal control processes.\nWhich processes are truly critical? What would be the impact of their unavailability? Which external dependencies could compromise them? Is the residual risk compatible with the organization\u2019s objectives?\nThese are questions that require structured answers, supported by evidence and meaningful indicators. Without this integration, even a technologically advanced system may exhibit significant organizational vulnerabilities.<\/p>\n\n\n\n<div style=\"height:10px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">2.2. Governance and Accountability: The Role of Management<\/h3>\n\n\n\n<div style=\"height:8px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph translation-block\">The growing relevance of cyber risk requires informed involvement from governing and management bodies.\nThe NIS2 Directive, transposed in Italy through Legislative Decree 138\/2024, strengthens the role of management bodies in overseeing the measures for managing cyber risk.\nOperational responsibility may be assigned to specialist functions, but it must be embedded within a governance system characterized by clear roles, effective information flows, and adequate oversight.\nManagement must be able to understand the implications of the risk, set priorities, and verify the alignment between exposure, controls, and available resources.\nCybersecurity can be delegated in execution, but it cannot be excluded from corporate governance.<\/p>\n\n\n\n<div style=\"height:10px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">2.3. Cyber resilience e supply chain: il rischio oltre il perimetro aziendale<\/h3>\n\n\n\n<div style=\"height:10px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph translation-block\">Dependence on suppliers, cloud services, and external platforms makes a strategy focused solely on internal infrastructures insufficient.\nThe compromise of a third party can propagate along the supply chain and disrupt essential processes. Supplier management must therefore evolve toward continuous monitoring, proportionate to the criticality of services and dependencies.\nAt the same time, prevention must be accompanied by a concrete ability to respond and recover. Incident response plans, backups, and business continuity procedures must be validated through tests and exercises.\nCyber resilience does not coincide with the absence of incidents, but with the ability to contain their effects and preserve essential functions.<\/p>\n\n\n\n<div style=\"height:10px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">2.4. Regulatory Compliance: Beyond Formal Adherence<\/h3>\n\n\n\n<div style=\"height:9px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph translation-block\">The European regulatory framework \u2014 from NIS2 to the DORA Regulation for the financial sector, and from the GDPR to the Cyber Resilience Act \u2014 reinforces the focus on structured digital\u2011risk management.\nThese regulations have different scopes, yet they highlight the importance of clearly defined responsibilities, adequate measures, and verifiable processes.\nCompliance, however, does not automatically equate to cyber maturity. Policies, procedures, and registers are necessary, but their effectiveness depends on actual implementation and the ability to adapt to evolving threats.\nThe challenge lies in moving beyond a fragmented, requirement\u2011driven approach and integrating compliance, cybersecurity, risk management, and operational continuity into a coherent risk\u2011governance model.<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Governance as a Lever for Digital Resilience<\/h2>\n\n\n\n<p class=\"wp-block-paragraph translation-block\">The evolution of cyber risk requires moving beyond a security vision limited to the technological dimension. Protecting systems remains essential, but it is not sufficient without a governance model capable of connecting risk, strategy, accountability, and operational continuity.\nCompetitive advantage does not stem solely from the ability to prevent an attack, but also from understanding one\u2019s exposures, making timely decisions, and preserving corporate value under adverse conditions.\nFor organizations, the issue is concrete: is governance truly capable of steering cyber risk, or does it still focus primarily on monitoring technical and regulatory aspects?\nThe answer is a meaningful indicator of digital maturity and of the organization\u2019s ability to navigate an ever\u2011evolving risk landscape.<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Sources and Regulatory References<\/h3>\n\n\n\n<div style=\"height:10px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h4 class=\"wp-block-heading\">European Regulatory Framework<\/h4>\n\n\n\n<div style=\"height:10px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"translation-block\">Directive (EU) 2022\/2555 \u2014 NIS2: cyber\u2011risk management, supply\u2011chain security, and accountability of management bodies.<\/li>\n\n\n\n<li class=\"translation-block\">Regulation (EU) 2022\/2554 \u2014 DORA: digital operational resilience and ICT risk management in the financial sector.<\/li>\n\n\n\n<li class=\"translation-block\">Regulation (EU) 2016\/679 \u2014 GDPR: protection of personal data and security of processing.<\/li>\n\n\n\n<li class=\"translation-block\">Regulation (EU) 2024\/2847 \u2014 Cyber Resilience Act: cybersecurity requirements for products with digital elements. The reporting obligations apply from 11 September 2026; general application is scheduled for 11 December 2027.<\/li>\n<\/ul>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h4 class=\"wp-block-heading\">National Regulatory Framework<\/h4>\n\n\n\n<div style=\"height:10px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"translation-block\">Legislative Decree of 4 September 2024, No. 138: transposition of the NIS2 Directive. Consolidated text available on Normattiva.<\/li>\n\n\n\n<li class=\"translation-block\">Law of 28 June 2024, No. 90: provisions on strengthening national cybersecurity and on cyber\u2011related criminal offences. Published in the Official Gazette.<\/li>\n<\/ul>","protected":false},"excerpt":{"rendered":"<p>Il rischio cyber sta evolvendo rapidamente, trasformandosi da questione prevalentemente tecnologica a fattore strategico per la continuit\u00e0 operativa e la resilienza delle organizzazioni.<br \/>\nLa crescente interdipendenza digitale, l\u2019esposizione alle vulnerabilit\u00e0 della supply chain e l\u2019evoluzione delle minacce richiedono un ripensamento della governance aziendale. Non \u00e8 pi\u00f9 sufficiente implementare controlli di sicurezza: occorre integrare il cyber risk nei processi decisionali, nel sistema di controllo interno e nella gestione dei rischi d\u2019impresa.<br \/>\nIn questo contesto, la sfida per le organizzazioni \u00e8 sviluppare un modello di governance capace di coniugare responsabilit\u00e0, conformit\u00e0 normativa e capacit\u00e0 di adattamento.<\/p>","protected":false},"author":1,"featured_media":3314,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_templately_pack_id":"","_templately_imported_at":"","_templately_source":"","_templately_import_session_id":"","footnotes":""},"categories":[14],"tags":[],"class_list":["post-3313","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>La Governance del Rischio nell\u2019Impresa Contemporanea | PF Advisory<\/title>\n<meta name=\"description\" content=\"Come passare dall&#039;obbligo al vantaggio competitivo con la compliance by design: guida all&#039;intelligenza di GDPR, NIS2 e ISO 31000.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.pfadvisory.it\/en\/la-governance-del-rischio-nellimpresa-contemporanea\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"La Governance del Rischio nell\u2019Impresa Contemporanea | PF Advisory\" \/>\n<meta property=\"og:description\" content=\"Come passare dall&#039;obbligo al vantaggio competitivo con la compliance by design: guida all&#039;intelligenza di GDPR, NIS2 e ISO 31000.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.pfadvisory.it\/en\/la-governance-del-rischio-nellimpresa-contemporanea\/\" \/>\n<meta property=\"og:site_name\" content=\"PF Advisory\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-15T09:44:32+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-15T09:44:33+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.pfadvisory.it\/wp-content\/uploads\/2026\/07\/immaginedelprofilo2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"512\" \/>\n\t<meta property=\"og:image:height\" content=\"512\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"wp_19764851\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"wp_19764851\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/la-governance-del-rischio-nellimpresa-contemporanea\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/la-governance-del-rischio-nellimpresa-contemporanea\\\/\"},\"author\":{\"name\":\"wp_19764851\",\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/#\\\/schema\\\/person\\\/fb34cce26c0ad7d653104ef34f523146\"},\"headline\":\"La Governance del Rischio nell\u2019Impresa Contemporanea\",\"datePublished\":\"2026-10-15T09:44:32+00:00\",\"dateModified\":\"2026-10-15T09:44:33+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/la-governance-del-rischio-nellimpresa-contemporanea\\\/\"},\"wordCount\":833,\"publisher\":{\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/la-governance-del-rischio-nellimpresa-contemporanea\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.pfadvisory.it\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/RISCHIOCYBER_PIC.avif\",\"articleSection\":[\"Cybersecurity\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/la-governance-del-rischio-nellimpresa-contemporanea\\\/\",\"url\":\"https:\\\/\\\/www.pfadvisory.it\\\/la-governance-del-rischio-nellimpresa-contemporanea\\\/\",\"name\":\"La Governance del Rischio nell\u2019Impresa Contemporanea | PF Advisory\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/la-governance-del-rischio-nellimpresa-contemporanea\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/la-governance-del-rischio-nellimpresa-contemporanea\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.pfadvisory.it\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/RISCHIOCYBER_PIC.avif\",\"datePublished\":\"2026-10-15T09:44:32+00:00\",\"dateModified\":\"2026-10-15T09:44:33+00:00\",\"description\":\"Come passare dall'obbligo al vantaggio competitivo con la compliance by design: guida all'intelligenza di GDPR, NIS2 e ISO 31000.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/la-governance-del-rischio-nellimpresa-contemporanea\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.pfadvisory.it\\\/la-governance-del-rischio-nellimpresa-contemporanea\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/la-governance-del-rischio-nellimpresa-contemporanea\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.pfadvisory.it\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/RISCHIOCYBER_PIC.avif\",\"contentUrl\":\"https:\\\/\\\/www.pfadvisory.it\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/RISCHIOCYBER_PIC.avif\",\"width\":2000,\"height\":1121},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/la-governance-del-rischio-nellimpresa-contemporanea\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.pfadvisory.it\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"La Governance del Rischio nell\u2019Impresa Contemporanea\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/#website\",\"url\":\"https:\\\/\\\/www.pfadvisory.it\\\/\",\"name\":\"PF Advisory\",\"description\":\"Information security | Governance and Compliance\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/#organization\"},\"alternateName\":\"pf advisory\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.pfadvisory.it\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/#organization\",\"name\":\"PF Advisory\",\"alternateName\":\"pf advisory\",\"url\":\"https:\\\/\\\/www.pfadvisory.it\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.pfadvisory.it\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/logo_normale2-scaled.png\",\"contentUrl\":\"https:\\\/\\\/www.pfadvisory.it\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/logo_normale2-scaled.png\",\"width\":2560,\"height\":290,\"caption\":\"PF Advisory\"},\"image\":{\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/pfadvisory26\\\/?viewAsMember=true\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/#\\\/schema\\\/person\\\/fb34cce26c0ad7d653104ef34f523146\",\"name\":\"wp_19764851\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e2ba93f8e0de04f34e142d26e1655ca3851dc793989e5645727d1540b17d314c?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e2ba93f8e0de04f34e142d26e1655ca3851dc793989e5645727d1540b17d314c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e2ba93f8e0de04f34e142d26e1655ca3851dc793989e5645727d1540b17d314c?s=96&d=mm&r=g\",\"caption\":\"wp_19764851\"},\"sameAs\":[\"https:\\\/\\\/www.pfadvisory.it\"],\"url\":\"https:\\\/\\\/www.pfadvisory.it\\\/en\\\/author\\\/wp_19764851\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"La Governance del Rischio nell\u2019Impresa Contemporanea | PF Advisory","description":"Come passare dall'obbligo al vantaggio competitivo con la compliance by design: guida all'intelligenza di GDPR, NIS2 e ISO 31000.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.pfadvisory.it\/en\/la-governance-del-rischio-nellimpresa-contemporanea\/","og_locale":"en_GB","og_type":"article","og_title":"La Governance del Rischio nell\u2019Impresa Contemporanea | PF Advisory","og_description":"Come passare dall'obbligo al vantaggio competitivo con la compliance by design: guida all'intelligenza di GDPR, NIS2 e ISO 31000.","og_url":"https:\/\/www.pfadvisory.it\/en\/la-governance-del-rischio-nellimpresa-contemporanea\/","og_site_name":"PF Advisory","article_published_time":"2026-10-15T09:44:32+00:00","article_modified_time":"2026-10-15T09:44:33+00:00","og_image":[{"width":512,"height":512,"url":"https:\/\/www.pfadvisory.it\/wp-content\/uploads\/2026\/07\/immaginedelprofilo2.png","type":"image\/png"}],"author":"wp_19764851","twitter_card":"summary_large_image","twitter_misc":{"Written by":"wp_19764851","Estimated reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.pfadvisory.it\/la-governance-del-rischio-nellimpresa-contemporanea\/#article","isPartOf":{"@id":"https:\/\/www.pfadvisory.it\/la-governance-del-rischio-nellimpresa-contemporanea\/"},"author":{"name":"wp_19764851","@id":"https:\/\/www.pfadvisory.it\/#\/schema\/person\/fb34cce26c0ad7d653104ef34f523146"},"headline":"La Governance del Rischio nell\u2019Impresa Contemporanea","datePublished":"2026-10-15T09:44:32+00:00","dateModified":"2026-10-15T09:44:33+00:00","mainEntityOfPage":{"@id":"https:\/\/www.pfadvisory.it\/la-governance-del-rischio-nellimpresa-contemporanea\/"},"wordCount":833,"publisher":{"@id":"https:\/\/www.pfadvisory.it\/#organization"},"image":{"@id":"https:\/\/www.pfadvisory.it\/la-governance-del-rischio-nellimpresa-contemporanea\/#primaryimage"},"thumbnailUrl":"https:\/\/www.pfadvisory.it\/wp-content\/uploads\/2026\/10\/RISCHIOCYBER_PIC.avif","articleSection":["Cybersecurity"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/www.pfadvisory.it\/la-governance-del-rischio-nellimpresa-contemporanea\/","url":"https:\/\/www.pfadvisory.it\/la-governance-del-rischio-nellimpresa-contemporanea\/","name":"La Governance del Rischio nell\u2019Impresa Contemporanea | PF Advisory","isPartOf":{"@id":"https:\/\/www.pfadvisory.it\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.pfadvisory.it\/la-governance-del-rischio-nellimpresa-contemporanea\/#primaryimage"},"image":{"@id":"https:\/\/www.pfadvisory.it\/la-governance-del-rischio-nellimpresa-contemporanea\/#primaryimage"},"thumbnailUrl":"https:\/\/www.pfadvisory.it\/wp-content\/uploads\/2026\/10\/RISCHIOCYBER_PIC.avif","datePublished":"2026-10-15T09:44:32+00:00","dateModified":"2026-10-15T09:44:33+00:00","description":"Come passare dall'obbligo al vantaggio competitivo con la compliance by design: guida all'intelligenza di GDPR, NIS2 e ISO 31000.","breadcrumb":{"@id":"https:\/\/www.pfadvisory.it\/la-governance-del-rischio-nellimpresa-contemporanea\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.pfadvisory.it\/la-governance-del-rischio-nellimpresa-contemporanea\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.pfadvisory.it\/la-governance-del-rischio-nellimpresa-contemporanea\/#primaryimage","url":"https:\/\/www.pfadvisory.it\/wp-content\/uploads\/2026\/10\/RISCHIOCYBER_PIC.avif","contentUrl":"https:\/\/www.pfadvisory.it\/wp-content\/uploads\/2026\/10\/RISCHIOCYBER_PIC.avif","width":2000,"height":1121},{"@type":"BreadcrumbList","@id":"https:\/\/www.pfadvisory.it\/la-governance-del-rischio-nellimpresa-contemporanea\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.pfadvisory.it\/"},{"@type":"ListItem","position":2,"name":"La Governance del Rischio nell\u2019Impresa Contemporanea"}]},{"@type":"WebSite","@id":"https:\/\/www.pfadvisory.it\/#website","url":"https:\/\/www.pfadvisory.it\/","name":"PF Advisory","description":"Information security | Governance and Compliance","publisher":{"@id":"https:\/\/www.pfadvisory.it\/#organization"},"alternateName":"pf advisory","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.pfadvisory.it\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.pfadvisory.it\/#organization","name":"PF Advisory","alternateName":"pf advisory","url":"https:\/\/www.pfadvisory.it\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.pfadvisory.it\/#\/schema\/logo\/image\/","url":"https:\/\/www.pfadvisory.it\/wp-content\/uploads\/2026\/07\/logo_normale2-scaled.png","contentUrl":"https:\/\/www.pfadvisory.it\/wp-content\/uploads\/2026\/07\/logo_normale2-scaled.png","width":2560,"height":290,"caption":"PF Advisory"},"image":{"@id":"https:\/\/www.pfadvisory.it\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/pfadvisory26\/?viewAsMember=true"]},{"@type":"Person","@id":"https:\/\/www.pfadvisory.it\/#\/schema\/person\/fb34cce26c0ad7d653104ef34f523146","name":"wp_19764851","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/secure.gravatar.com\/avatar\/e2ba93f8e0de04f34e142d26e1655ca3851dc793989e5645727d1540b17d314c?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/e2ba93f8e0de04f34e142d26e1655ca3851dc793989e5645727d1540b17d314c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e2ba93f8e0de04f34e142d26e1655ca3851dc793989e5645727d1540b17d314c?s=96&d=mm&r=g","caption":"wp_19764851"},"sameAs":["https:\/\/www.pfadvisory.it"],"url":"https:\/\/www.pfadvisory.it\/en\/author\/wp_19764851\/"}]}},"_links":{"self":[{"href":"https:\/\/www.pfadvisory.it\/en\/wp-json\/wp\/v2\/posts\/3313","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.pfadvisory.it\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.pfadvisory.it\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.pfadvisory.it\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.pfadvisory.it\/en\/wp-json\/wp\/v2\/comments?post=3313"}],"version-history":[{"count":5,"href":"https:\/\/www.pfadvisory.it\/en\/wp-json\/wp\/v2\/posts\/3313\/revisions"}],"predecessor-version":[{"id":3319,"href":"https:\/\/www.pfadvisory.it\/en\/wp-json\/wp\/v2\/posts\/3313\/revisions\/3319"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.pfadvisory.it\/en\/wp-json\/wp\/v2\/media\/3314"}],"wp:attachment":[{"href":"https:\/\/www.pfadvisory.it\/en\/wp-json\/wp\/v2\/media?parent=3313"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.pfadvisory.it\/en\/wp-json\/wp\/v2\/categories?post=3313"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.pfadvisory.it\/en\/wp-json\/wp\/v2\/tags?post=3313"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}