I found that I really needed to keep 2 spies in cities that were anywhere near Milan in order to have a good shot at stopping infiltration. Not only are they aggressive with their usage of spies and assassins, but because they're used so much they tend to be pretty powerful. Milan is the one faction that the AI plays pretty well.