Solicitar documento

Para descargar este documento debe ser miembro con acceso a entregables. Si ya es miembro, puede descargarlo desde nuestra plataforma NGLibrary.

Document request

If you are interested in this document, you can ask for it at info@cci-es.org or register freely in our platform as a member able to access to deliveries.

Cyber Resilience Framework for the Industrial Supply Chain

979-13-990148-7-7

This document contains the SCR2 cyber resilience framework from the Center for Industrial Cybersecurity, designed to govern distributed third-party risk across the industrial supply chain. Through three structured pillars, the model proposes technical, operational, and verifiable capabilities for the supply chain aimed at transforming provider relationships into a strategic alliance for joint resilience. Its core purpose is to complement the corporate NIST C-SCRM framework, facilitating informed decision-making regarding soberignty, dependencies, and real impacts in digitalized industrial environments.

 

Available to Subscription Members

Not a member of the Industrial Cybersecurity Center yet?

Register here.

You can purchase this document on our NGLibrary
27/05/2026

Title

Study on the Maturity of Food Sector Organizations Facing High-Impact Cyber Incidents

19/10/2026

This study analyzes the maturity level of food sector organizations against high-impact cyber incidents, understood as their actual capability to protect, sustain, and recover their critical industrial processes. The study combines an industry survey on the operational, food safety, financial, reputational, environmental, and regulatory impact of various cyber incidents with an industrial cybersecurity maturity assessment […]

Technological [industrial] evolution is a bodge (AI included)

01/10/2026

This document analyzes how technological and industrial evolution is not the result of perfect designs, but of a cumulative process of patches, adaptations, and dependencies that generate digital fragility. Through five strategic rules and a common language (D-P-R), it proposes transforming this inevitable imperfection into operational resilience and human sovereignty.

Guide to Adapting and Evolving the SOC in Industrial Automation and Digitalization Environments

09/09/2026

This guide does not intend to define a single model for a Cybersecurity Operations Center, but rather to provide criteria, capabilities, recommendations, and best practices to build, evolve, or adapt a SOC progressively, aligning it with the operational reality of each industrial organization.

SG2CI: The operating system for the ICSO

07/07/2026

This guide presents the SG2CI, an industrial cybersecurity governance and management operating system that enables the ICSO to govern, coordinate, and evolve cybersecurity in a complex, interdependent, and changing industrial environment. SG2CI does not intend to replace standards such as IEC 62443, ISO 27001, or the NIST CSF 2.0. SG2CI is an evolution of SGCI, […]