Team size:   15 people across the different legal and compliance functions 

How do you approach managing legal aspects during periods of instability or crises, and how does your legal strategy align with the broader business strategy to ensure the organisation’s resilience?  

We try to preliminarily map and prevent possible crisis and instability events, to immediately react as the case may require; should these cases occur, a crisis management and disaster recovery complete policy system could help along with training activities in favour of ad-hoc enrolled FTEs or risk managers. In terms of managing legal aspects, transparency, disclosure and immediate responses to customers and regulators could be a valid solution to prevent sanctions and legal claims for examples in case of outages or interruptions of services due to system failure or acts of God. 

What are the main cases or transactions that you have been involved in recently?  

Restructuring of the corporate debt with access to SACE Guarantee, i.e., a specific subsidised State guarantee granted to corporations under certain requirements provided by law, and extension of the financing pool; management of two major outages to the e-mail infrastructure with interruption of services and access to customers’ e-mail.   

What do you see as the major legal challenges for businesses in Italy over the next five years, and how are you preparing to address them?  

We are facing new challenges in the digital market environment; in particular, the cyber risk and the adoption of new AI tools and framework represent the real challenges that legal and compliance functions are facing; in my company, we have tried to adopt a multidisciplinary approach to cyber risk management issues; certainly, if on one hand the compliance team guides on the basis of an in-depth knowledge of current regulations (including GDPR, Digital Service Act, Digital Governance Act, Digital Market Act, etc.), on the other hand we are trying to approach the study and implementation of processes trying to cover to the extent possible or at least involve the IT internal functions on purely technical aspects.