Publicaciones Publications

Ver todas las publicaciones
Back to publications list

Solicitar documento

Para descargar este documento debe ser miembro con acceso a entregables. Si ya es miembro, puede descargarlo desde nuestra plataforma NGLibrary.

NGLibrary

Document request

If you are interested in this document, you can ask for it at info@cci-es.org or register freely in our platform as a member able to access to deliveries.

Become a member

DR2 MODEL. Decisions with Roles and Responsibilities

CCI-1 Strategies and regulations, CCI-5 Guides and good practices, Publications

979-13-991104-4-9

This document analyzes the DR² Model from the Center for Industrial Cybersecurity, a framework designed to govern critical decision-making under uncertainty in IT/OT environments. Unlike classic models, this approach separates technical capability from the legitimacy to decide, directly linking authority to actual impact and the “pain” assumed. Through four fundamental states (M-I-D-E) and ten essential rules, the model avoids blind automation and decision-making black boxes, guaranteeing human sovereignty, organizational traceability, and operational compliance with current regulations such as the AI Act.

Are you not a member of the Industrial Cybersecurity Center yet?

Register here

You can purchase this document on our NGLibrary
español
06/07/2026

Title

CCI-5 Guides and good practices, Publications

SG2CI: The operating system for the ICSO

07/07/2026

This guide presents the SG2CI, an industrial cybersecurity governance and management operating system that enables the ICSO to govern, coordinate, and evolve cybersecurity in a complex, interdependent, and changing industrial environment. SG2CI does not intend to replace standards such as IEC 62443, ISO 27001, or the NIST CSF 2.0. SG2CI is an evolution of SGCI, […]

CCI-1 Strategies and regulations, CCI-5 Guides and good practices, CCI-8 Compliance, Publications

Guide of interpretation of the ENS in the industrial operation

23/06/2026

This guide addresses the interpretation of the Esquema Nacional de Seguridad (ENS) in operational technology (OT) environments without altering regulations or introducing operational risks. It translates the ENS objectives into the physical and industrial reality, separating “what” the framework requires from “how” it is executed. It prioritizes availability and process integrity, validating the use of compensatory and organizational controls specific to the plant. […]

CCI-5 Guides and good practices, Publications

Industrial Cybersecurity Maturity Model and its MACIN Platform

09/06/2026

This document analyzes the Industrial Cybersecurity Maturity Model and its digital platform MACIN, developed by the Industrial Cybersecurity Center (CCI) in its 2026 edition. The model is specifically designed for OT environments and aligned with C2M2 v2.1, structuring itself into 10 domains, 45 objectives, and 175 practices evaluated through five maturity levels and four dimensions: processes, technology, people, and results.

CCI-5 Guides and good practices, CCI-6 Tools, Publications

Cyber Resilience Framework for the Industrial Supply Chain

27/05/2026

This document contains the SCR2 cyber resilience framework from the Center for Industrial Cybersecurity, designed to govern distributed third-party risk across the industrial supply chain. Through three structured pillars, the model proposes technical, operational, and verifiable capabilities for the supply chain aimed at transforming provider relationships into a strategic alliance for joint resilience. Its core […]

...