A capitolato di gara is the technical specification attached to a public tender. It defines what a supplier must deliver, the minimum requirements, obligations, acceptance tests, and any operational limits. In cybersecurity, this document matters because it turns security and governance into enforceable clauses instead of informal promises.
For AI and other digital systems, a well-written capitolato di gara can require access controls, logging, data boundaries, portability, human oversight, and security evidence before acceptance. That helps defenders by making risk measurable and auditable during procurement, not after deployment. Attackers often exploit vague requirements, weak oversight, or vendor lock-in; a strong tender specification reduces those gaps by forcing clear responsibilities, review points, and exit conditions.