This paper presentation explores the development of the new relationship between the public administration and the cyber security in light of the defense of the IT heritage, taking into consideration the key role of AgID and Consip and the complex architecture of cyber security to be implemented by the public entities following the AgID resolutions and the rules adopted during the last few years.