Marco R.A. Bozzetti is the founder and coordinator of the Italian Observatory on Digital Attacks – OAD.
He oversees its approach, development and main activities, from the annual survey and the preparation of the related Report to the OAD Community, OAD Insights and the OAD LinkedIn Group.
Since 2009, he has promoted the collection and dissemination of independent data on digital attacks affecting organisations operating in Italy, with the aim of improving knowledge of these phenomena and increasing awareness of digital risks and protection measures.
A brief biography
Professional profile
An electronic engineer who graduated from Politecnico di Milano, he is the founder and Managing Director of Malabo S.r.l., an ICT management consulting company operating since February 2001.
He held positions of increasing responsibility at major industrial companies, including Olivetti and Italtel, and at consulting firms such as Arthur Andersen Management Consultants and GEA/GEALAB. From 1995 to 2000, he was the first Chief Information Officer of the entire ENI Group.
During his career, he founded, managed or was a partner in several ICT companies, including CA.SI, Abiemme, Ibimaint System Engineering, ClickICT and System Engineering.
Digital security and ICT activities
As a consultant, he has carried out numerous technical and organisational projects involving the information systems of medium-sized and large companies and public-sector organisations. His work has focused on aligning ICT with business requirements, supporting innovation and generating tangible and measurable value.
His main areas of expertise include:
- information systems governance and management, based on ITIL, COBIT, ISO and NIST standards;
- digital security;
- ICT risk assessment and management, including Business Impact Analysis;
- the design and implementation of Business Continuity and Disaster Recovery Plans;
- ICT architecture design and rationalisation;
- the definition and implementation of ICT strategies;
- the assessment of technologies, skills and ICT roles;
- ICT value analysis and ICT-enabled innovation;
- the reorganisation of ICT structures and processes;
- digital transformation;
- support for compliance with European regulations.
Professional associations and appointments
He served as President and Vice-President of FIDAInform, SicurForum within FTI and ClubTI Milano, and was a member of the Innovative Tertiary Sector Council of Assolombarda.
He is currently Honorary President of AIPSI – the Italian Association of Information Security Professionals, the Italian Chapter of the international ISSA organisation, after serving as its President from 2016 to the end of 2024.
He is also a member of the Board and Treasurer of FIDAInform, having previously served as its President from 2004 to 2006, and is a member and statutory auditor of ClubTI Milano, of which he was President from 2000 to 2006.
He is a member of AICA, which actively collaborates with OAD. Within AICA, he participates in several committees and working groups focusing on ICT competences and e-CF and NIS2 certifications.
He holds ITIL v3 and EUCIP Professional “Security Adviser” certifications. He is also an AICA examiner for e-CFplus certifications, based on EN 16234 and UNI 11506.
Since March 2025, he has coordinated Working Group 09 of UNINFO Technical Committee 526 — UNI/CT 526/GL 09 — which is responsible for defining managerial professional role profiles in the ICT sector.
Research, education and publications
At the beginning of his career, while working at Olivetti and at CREI, the research centre of Politecnico di Milano, he was among the first researchers internationally to work on internetworking. His activities began with his degree thesis, entitled “Routing and Internetworking”, and continued through his contribution to the EIN project within COST 11.
These initiatives contributed to Italy’s participation in the standardisation of the OSI – Open Systems Interconnection model. In this context, he worked within ECMA, ISO and the former CCITT, now ITU.
From the 1990s until 2003, on behalf of SMAU and together with the leading national ICT trade fairs in Europe, he conceived and coordinated EITO – the European Information Technology Observatory, the annual European survey on the ICT market and its technological trends.
Since 2009, he has conceived and conducted the annual OAD – Italian Observatory on Digital Attacks survey.
Since the beginning of his career at CREI, he has designed and delivered both classroom-based and online training courses on a wide range of technical and managerial subjects. These courses have been provided to companies, training organisations and university master’s programmes.
He has authored approximately 250 publications, including more than 50 books, reports and international contributions. An updated list of publications will be made available shortly.
View Marco R.A. Bozzetti’s LinkedIn profile
The current OAD collaborative ecosystem
OAD has evolved from an annual online survey into a collaborative ecosystem that remains active throughout the year.
The OAD survey, the OAD Report, the OAD Community, OAD Insights and the OAD LinkedIn Group are interconnected and complementary initiatives, as shown in the following figure.
The individual initiatives are described in the relevant sections of this website.