{"id":7658,"date":"2026-10-18T11:57:48","date_gmt":"2026-10-18T09:57:48","guid":{"rendered":"https:\/\/eu.it-cyberwall.com\/guides\/audit-scansione-delle-vulnerabilita-o-penetration-test-cosa-ordinare\/"},"modified":"2026-10-18T20:22:49","modified_gmt":"2026-10-18T18:22:49","slug":"audit-scan-test-intrusion","status":"publish","type":"page","link":"https:\/\/eu.it-cyberwall.com\/it\/guides\/audit-scan-test-intrusion\/","title":{"rendered":"Audit, scansione delle vulnerabilit\u00e0 o penetration test: cosa ordinare"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"7658\" class=\"elementor elementor-7658 elementor-6680\" data-elementor-settings=\"{&quot;ha_cmc_init_switcher&quot;:&quot;no&quot;}\" data-elementor-post-type=\"page\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-d6b23bd elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"d6b23bd\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-4847607\" data-id=\"4847607\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-2517b80 elementor-widget elementor-widget-html\" data-id=\"2517b80\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t\t<style>.itcw-g{max-width:900px;margin:0 auto;font-size:17px;line-height:1.65;color:#2b2f3a}.itcw-g h2{margin-top:10px}.itcw-g .tw{overflow-x:auto;margin:18px 0}.itcw-g table{width:100%;border-collapse:collapse;font-size:15px;min-width:640px}.itcw-g th,.itcw-g td{border:1px solid #e3e6ee;padding:10px 12px;vertical-align:top;text-align:left}.itcw-g thead th{background:#0E0129;color:#fff}.itcw-g tbody th{background:#F6F7FA;font-weight:600}.itcw-g .box{background:#F6F7FA;border-left:4px solid #DE3241;padding:16px 20px;border-radius:6px;margin:18px 0}.itcw-g .box.ok{border-left-color:#2C9703}.itcw-g sup a{text-decoration:none;font-weight:600}.itcw-g ol.src li{margin-bottom:8px;font-size:15px;word-break:break-word}.itcw-g .note{font-size:14px;color:#6b7080}.itcw-g .toc a{display:inline-block;margin:4px 10px 4px 0}<\/style>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-090f00e elementor-widget elementor-widget-heading\" data-id=\"090f00e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h6 class=\"elementor-heading-title elementor-size-default\">Guida<\/h6>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a49fd4e elementor-widget elementor-widget-heading\" data-id=\"a49fd4e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Audit, scansione delle vulnerabilit\u00e0 o penetration test: cosa ordinare<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3fe4617 elementor-widget elementor-widget-text-editor\" data-id=\"3fe4617\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><p style=\"text-align:center\">Una scansione automatizzata elenca vulnerabilit\u00e0 probabili, un audit le classifica e indica cosa correggere, un penetration test dimostra cosa potrebbe farne un aggressore. Ecco le definizioni dell\u2019ANSSI, cosa deve contenere un rapporto e cosa impongono davvero il GDPR e l\u2019ISO 27001.<\/p><p class=\"note\" style=\"text-align:center\">Aggiornato il 18 ottobre 2026 \u00b7 Le cifre hanno la loro fonte in fondo alla pagina; le valutazioni sono quelle di IT CyberWall.<\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-7a65bc8 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"7a65bc8\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-53b09af\" data-id=\"53b09af\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-8802df8 elementor-widget elementor-widget-text-editor\" data-id=\"8802df8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><div class=\"box toc\"><strong>In questa guida:<\/strong><br \/><a href=\"#trois\">Tre servizi che si confondono<\/a> \u00b7 <a href=\"#types\">I cinque tipi di audit secondo l\u2019ANSSI<\/a> \u00b7 <a href=\"#rapport\">Cosa deve contenere il rapporto<\/a> \u00b7 <a href=\"#loi\">Cosa impone la legge, e cosa non impone<\/a> \u00b7 <a href=\"#autorisation\">Sempre un\u2019autorizzazione scritta<\/a> \u00b7 <a href=\"#commander\">Cosa ordinare?<\/a> \u00b7 <a href=\"#sources\">Fonti<\/a><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-d86f394 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"d86f394\" data-element_type=\"section\" data-e-type=\"section\" id=\"trois\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-a2d3929\" data-id=\"a2d3929\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6382abe elementor-widget elementor-widget-heading\" data-id=\"6382abe\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Tre servizi che si confondono<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a7115da elementor-widget elementor-widget-text-editor\" data-id=\"a7115da\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><table><thead><tr><th>Servizio<\/th><th>Cosa fa<\/th><th>Cosa riceve<\/th><\/tr><\/thead><tbody><tr><td><strong>Scansione delle vulnerabilit\u00e0<\/strong><\/td><td>Uno strumento interroga automaticamente le Sue macchine e confronta ci\u00f2 che vede con un database di vulnerabilit\u00e0 note.<\/td><td>Un elenco di vulnerabilit\u00e0 probabili, spesso lungo, da selezionare.<\/td><\/tr><tr><td><strong>Audit di sicurezza<\/strong><\/td><td>Degli auditor esaminano la Sua architettura, le Sue configurazioni, il Suo codice o la Sua organizzazione.<\/td><td>Un rapporto che classifica le vulnerabilit\u00e0 e indica cosa correggere per primo.<\/td><\/tr><tr><td><strong>Penetration test<\/strong><\/td><td>Degli auditor si mettono nei panni di un aggressore e verificano che una vulnerabilit\u00e0 sia realmente sfruttabile, e con quale impatto<sup><a href=\"#source-1\">[1]<\/a><\/sup>.<\/td><td>La prova di ci\u00f2 che un aggressore potrebbe fare, passo dopo passo.<\/td><\/tr><\/tbody><\/table><div class=\"box\">Per l\u2019ANSSI, \u00ab la ricerca interamente automatizzata di vulnerabilit\u00e0 non rappresenta un\u2019attivit\u00e0 di audit \u00bb<sup><a href=\"#source-1\">[1]<\/a><\/sup>. Una scansione \u00e8 utile, ma non \u00e8 un audit.<\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-592bdc5 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"592bdc5\" data-element_type=\"section\" data-e-type=\"section\" id=\"types\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-2442f4e\" data-id=\"2442f4e\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-a3ea377 elementor-widget elementor-widget-heading\" data-id=\"a3ea377\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">I cinque tipi di audit secondo l\u2019ANSSI<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-61941eb elementor-widget elementor-widget-text-editor\" data-id=\"61941eb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><p>Lo standard dei fornitori di audit qualificati (PASSI) distingue cinque attivit\u00e0<sup><a href=\"#source-1\">[1]<\/a><\/sup>:<\/p><ol><li><strong>Audit di architettura<\/strong>: la scelta e il posizionamento degli apparati, i collegamenti con internet e con le reti di terzi.<\/li><li><strong>Audit di configurazione<\/strong>: le impostazioni degli apparati di rete, dei sistemi, delle applicazioni e dei prodotti di sicurezza.<\/li><li><strong>Audit del codice sorgente<\/strong>: le vulnerabilit\u00e0 nel codice di un\u2019applicazione.<\/li><li><strong>Penetration test<\/strong>: lo sfruttamento delle vulnerabilit\u00e0 in condizioni reali di attacco.<\/li><li><strong>Audit organizzativo e fisico<\/strong>: la governance, le procedure, la sicurezza dei locali.<\/li><\/ol><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-8776107 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"8776107\" data-element_type=\"section\" data-e-type=\"section\" id=\"rapport\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-1532094\" data-id=\"1532094\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-dc3979b elementor-widget elementor-widget-heading\" data-id=\"dc3979b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Cosa deve contenere il rapporto<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e5cb20f elementor-widget elementor-widget-text-editor\" data-id=\"e5cb20f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><p>Lo standard PASSI stabilisce il contenuto di un rapporto di audit<sup><a href=\"#source-1\">[1]<\/a><\/sup>. \u00c8 una buona griglia per valutare qualsiasi rapporto:<\/p><ul><li>una <strong>sintesi comprensibile per i non esperti<\/strong>: contesto, perimetro, vulnerabilit\u00e0 critiche e valutazione del livello di sicurezza;<\/li><li>una <strong>tabella delle vulnerabilit\u00e0<\/strong> classificate in base al loro impatto e alla loro facilit\u00e0 di sfruttamento;<\/li><li><strong>raccomandazioni<\/strong> collegate a ciascuna vulnerabilit\u00e0, classificate per criticit\u00e0 e per costo;<\/li><li>per un penetration test, lo <strong>svolgimento del test<\/strong> e il metodo utilizzato;<\/li><li>i <strong>limiti<\/strong>: ci\u00f2 che non \u00e8 stato possibile coprire e le fasi realizzate con strumenti automatici.<\/li><\/ul><p>Un rapporto che \u00e8 solo l\u2019output di uno strumento, senza sintesi n\u00e9 priorit\u00e0, non La aiuter\u00e0 a decidere.<\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-1a50f37 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"1a50f37\" data-element_type=\"section\" data-e-type=\"section\" id=\"loi\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-9f4c41b\" data-id=\"9f4c41b\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-016da0c elementor-widget elementor-widget-heading\" data-id=\"016da0c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Cosa impone la legge, e cosa non impone<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0f19049 elementor-widget elementor-widget-text-editor\" data-id=\"0f19049\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><ul><li><strong>Il GDPR<\/strong> richiede, per i trattamenti di dati personali, \u00ab una procedura per testare, verificare e valutare regolarmente l\u2019efficacia delle misure \u00bb di sicurezza (articolo 32), con un livello adeguato al rischio<sup><a href=\"#source-2\">[2]<\/a><\/sup>. Non impone espressamente un audit n\u00e9 un penetration test: spetta a Lei scegliere una procedura proporzionata.<\/li><li><strong>La norma ISO\/IEC 27001<\/strong> \u00e8 una norma volontaria: \u00e8 l\u2019azienda stessa a decidere di farsi certificare<sup><a href=\"#source-3\">[3]<\/a><\/sup>. Non \u00e8 un obbligo legale, anche se un cliente pu\u00f2 esigerla per contratto.<\/li><li><strong>Una qualifica PASSI<\/strong> \u00e8 obbligatoria solo quando un testo o un contratto la richiede. Si verifica sul sito dell\u2019ANSSI.<\/li><\/ul><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-30e6bac elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"30e6bac\" data-element_type=\"section\" data-e-type=\"section\" id=\"autorisation\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-20d378b\" data-id=\"20d378b\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-90d5350 elementor-widget elementor-widget-heading\" data-id=\"90d5350\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Sempre un\u2019autorizzazione scritta<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f1d8264 elementor-widget elementor-widget-text-editor\" data-id=\"f1d8264\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><p>Un penetration test consiste nell\u2019attaccare dei sistemi: si effettua solo con il consenso scritto del loro proprietario. Lo standard PASSI prevede una convenzione firmata prima dell\u2019audit e, per un penetration test, una scheda di autorizzazione firmata dal committente, dal soggetto sottoposto ad audit e dai terzi interessati (il Suo hosting provider, ad esempio), che elenca gli obiettivi, le date e gli orari<sup><a href=\"#source-1\">[1]<\/a><\/sup>.<\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-02a7bbc elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"02a7bbc\" data-element_type=\"section\" data-e-type=\"section\" id=\"commander\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-6669e3a\" data-id=\"6669e3a\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-bdfc223 elementor-widget elementor-widget-heading\" data-id=\"bdfc223\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Cosa ordinare?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a2402c3 elementor-widget elementor-widget-text-editor\" data-id=\"a2402c3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><table><thead><tr><th>La Sua situazione<\/th><th>Cosa \u00e8 adatto<\/th><\/tr><\/thead><tbody><tr><td>Non sa a che punto \u00e8<\/td><td>Un audit di architettura e di configurazione, con una sintesi per la direzione.<\/td><\/tr><tr><td>Vuole seguire l\u2019evoluzione nel tempo<\/td><td>Una scansione regolare, a complemento di un audit, mai al suo posto.<\/td><\/tr><tr><td>Un sito o un\u2019applicazione esposti su internet<\/td><td>Un penetration test su questo perimetro.<\/td><\/tr><tr><td>Un cliente o una gara d\u2019appalto esige una prova<\/td><td>Legga il requisito: qualifica PASSI, certificazione ISO 27001 o semplice rapporto di audit non sono la stessa cosa.<\/td><\/tr><\/tbody><\/table><p>I nostri audit sono descritti nella pagina <a href=\"https:\/\/eu.it-cyberwall.com\/it\/audit-de-securite\/\">Audit di sicurezza<\/a>.<\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-7254e9e elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"7254e9e\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-b69b529\" data-id=\"b69b529\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-30dee9b elementor-widget elementor-widget-heading\" data-id=\"30dee9b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Non sa cosa ordinare?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d6dd8e4 elementor-widget elementor-widget-text-editor\" data-id=\"d6dd8e4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Descriva il Suo contesto e ci\u00f2 che Le viene chiesto: Le diciamo quale tipo di audit \u00e8 adatto.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e001a47 elementor-align-center elementor-widget elementor-widget-button\" data-id=\"e001a47\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-md\" href=\"https:\/\/eu.it-cyberwall.com\/it\/contact\/?mf-besoin=audit#formulaire\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-arrow-right\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M190.5 66.9l22.2-22.2c9.4-9.4 24.6-9.4 33.9 0L441 239c9.4 9.4 9.4 24.6 0 33.9L246.6 467.3c-9.4 9.4-24.6 9.4-33.9 0l-22.2-22.2c-9.5-9.5-9.3-25 .4-34.3L311.4 296H24c-13.3 0-24-10.7-24-24v-32c0-13.3 10.7-24 24-24h287.4L190.9 101.2c-9.8-9.3-10-24.8-.4-34.3z\"><\/path><\/svg>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Descrivere la mia esigenza<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7f142f1 elementor-widget elementor-widget-text-editor\" data-id=\"7f142f1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><a href=\"https:\/\/eu.it-cyberwall.com\/it\/guides\/\">\u2190 Tutte le nostre guide<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-2fcb194 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"2fcb194\" data-element_type=\"section\" data-e-type=\"section\" id=\"sources\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-90414eb\" data-id=\"90414eb\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-1f422c7 elementor-widget elementor-widget-heading\" data-id=\"1f422c7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Fonti<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4ec2591 elementor-widget elementor-widget-text-editor\" data-id=\"4ec2591\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><p class=\"note\">Fonti consultate il 18 ottobre 2026. Le tariffe dei fornitori sono indicate IVA esclusa, nella valuta e nella regione del listino pubblicato, e possono cambiare: verifichi sempre la pagina ufficiale prima di decidere.<\/p><ol class=\"src\"><li id=\"source-1\">ANSSI \u2013 Prestataires d\u2019audit de la s\u00e9curit\u00e9 des syst\u00e8mes d\u2019information (PASSI), r\u00e9f\u00e9rentiel d\u2019exigences v2.1-a (1\u00b0 settembre 2023) \u2014 <a href=\"https:\/\/cyber.gouv.fr\/sites\/default\/files\/document\/R%C3%A9f%C3%A9rentiel%20PASSI%20%E2%80%93%20version%202.1-a%20%E2%80%93%20sans%20marque%20de%20r%C3%A9vision.pdf\" target=\"_blank\" rel=\"noopener\">cyber.gouv.fr\/sites\/default\/files\/document\/R%C3%A9f%C3%A9rentiel%20PASSI%20%E2%80%93%20version%202.1-a%20%E2%80%93%20sans%20marque%20de%20r%C3%A9vision.pdf<\/a><\/li><li id=\"source-2\">CNIL \u2013 R\u00e8glement europ\u00e9en sur la protection des donn\u00e9es, chapitre 4 (articolo 32) \u2014 <a href=\"https:\/\/www.cnil.fr\/fr\/reglement-europeen-protection-donnees\/chapitre4\" target=\"_blank\" rel=\"noopener\">www.cnil.fr\/fr\/reglement-europeen-protection-donnees\/chapitre4<\/a><\/li><li id=\"source-3\">ISO \u2013 ISO\/IEC 27001, Information security management systems \u2014 <a href=\"https:\/\/www.iso.org\/isoiec-27001-information-security.html\" target=\"_blank\" rel=\"noopener\">www.iso.org\/isoiec-27001-information-security.html<\/a><\/li><\/ol><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":7553,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_seopress_titles_title":"Audit, scansione o pentest: cosa scegliere? | IT CyberWall","_seopress_titles_desc":"Scansione delle vulnerabilit\u00e0, audit o penetration test in Europa: definizioni ANSSI, contenuto del report e cosa impongono GDPR e ISO 27001.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"penetration test pmi europa,audit sicurezza informatica,vulnerability assessment,pentest aziendale lussemburgo","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"footnotes":""},"class_list":["post-7658","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/eu.it-cyberwall.com\/it\/wp-json\/wp\/v2\/pages\/7658","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eu.it-cyberwall.com\/it\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/eu.it-cyberwall.com\/it\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/eu.it-cyberwall.com\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/eu.it-cyberwall.com\/it\/wp-json\/wp\/v2\/comments?post=7658"}],"version-history":[{"count":1,"href":"https:\/\/eu.it-cyberwall.com\/it\/wp-json\/wp\/v2\/pages\/7658\/revisions"}],"predecessor-version":[{"id":7659,"href":"https:\/\/eu.it-cyberwall.com\/it\/wp-json\/wp\/v2\/pages\/7658\/revisions\/7659"}],"up":[{"embeddable":true,"href":"https:\/\/eu.it-cyberwall.com\/it\/wp-json\/wp\/v2\/pages\/7553"}],"wp:attachment":[{"href":"https:\/\/eu.it-cyberwall.com\/it\/wp-json\/wp\/v2\/media?parent=7658"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}