The recent EU directive on NIS (network and information security) concerning cyber security, transposed into Italian legislation with decree no. 2018, identifies the FS Italiane Group as an essential service operator and, as such, requires that it adopt technical and organisational measures to strengthen management of cyber risks and prevent cyber attacks as part of a national and European model based on cooperation and the integration of information between member states.