Publicaciones Publications

Ver todas las publicaciones
Back to publications list

Solicitar documento

Para descargar este documento debe ser miembro con acceso a entregables. Si ya es miembro, puede descargarlo desde nuestra plataforma NGLibrary.

NGLibrary

Document request

If you are interested in this document, you can ask for it at info@cci-es.org or register freely in our platform as a member able to access to deliveries.

Become a member

Pocket Guide – Questions to Ask Your Industrial Technology and Service Providers About Their Cybersecurity Capabilities

CCI-5 Guides and good practices, Publications

This document, titled “Pocket Guide: Questions to Ask Your Industrial Technology and Service Providers About Their Cybersecurity Capabilities,” developed by the Industrial Cybersecurity Center (CCI), provides a structured set of questions designed to help organizations assess the level of maturity and commitment to cybersecurity among their industrial suppliers.

The guide is divided into three sections:

  • Common questions, applicable to any industrial provider, focusing on aspects such as knowledge of the OT environment, risk management, operational resilience, staff competencies, and incident response capabilities.

  • Specific questions for industrial technology providers, aimed at technological robustness, integration with OT security systems, and secure product design.

  • Specific questions for service providers, focused on secure remote access management, maintenance, security testing, and operational continuity.

Overall, the document seeks to promote a common language between clients and suppliers, aligned with frameworks such as IEC 62443 and NIS2, to strengthen resilience and trust within connected industrial ecosystems.

Access the document through the Knowledge Platform or NGLibrary.

Available free of charge for all CCI Members.

Not yet a member of the Industrial Cybersecurity Center?

Register here.

You can purchase this document on our NGLibrary
Spanish
22/10/2025

Title

Study on the Maturity of Food Sector Organizations Facing High-Impact Cyber Incidents

CCI-3 Situation studies, CCI-5 Guides and good practices, Publications

Study on the Maturity of Food Sector Organizations Facing High-Impact Cyber Incidents

19/10/2026

This study analyzes the maturity level of food sector organizations against high-impact cyber incidents, understood as their actual capability to protect, sustain, and recover their critical industrial processes. The study combines an industry survey on the operational, food safety, financial, reputational, environmental, and regulatory impact of various cyber incidents with an industrial cybersecurity maturity assessment […]

Technological [industrial] evolution is a bodge (AI included)

CCI-7 Notebooks and specialized series, Publications

Technological [industrial] evolution is a bodge (AI included)

01/10/2026

This document analyzes how technological and industrial evolution is not the result of perfect designs, but of a cumulative process of patches, adaptations, and dependencies that generate digital fragility. Through five strategic rules and a common language (D-P-R), it proposes transforming this inevitable imperfection into operational resilience and human sovereignty.

Cover image of the Guide to Adapting and Evolving the SOC in Industrial Automation and Digitalization Environments

CCI-5 Guides and good practices, Publications

Guide to Adapting and Evolving the SOC in Industrial Automation and Digitalization Environments

09/09/2026

This guide does not intend to define a single model for a Cybersecurity Operations Center, but rather to provide criteria, capabilities, recommendations, and best practices to build, evolve, or adapt a SOC progressively, aligning it with the operational reality of each industrial organization.

SG2CI: The operating system for the ICSO

CCI-5 Guides and good practices, Publications

SG2CI: The operating system for the ICSO

07/07/2026

This guide presents the SG2CI, an industrial cybersecurity governance and management operating system that enables the ICSO to govern, coordinate, and evolve cybersecurity in a complex, interdependent, and changing industrial environment. SG2CI does not intend to replace standards such as IEC 62443, ISO 27001, or the NIST CSF 2.0. SG2CI is an evolution of SGCI, […]

...