Publicaciones Publications

This guide does not intend to define a single model for a Cybersecurity Operations Center, but rather to provide criteria, capabilities, recommendations, and best practices to build, evolve, or adapt a SOC progressively, aligning it with the operational reality of each industrial organization.

This guide presents the SG2CI, an industrial cybersecurity governance and management operating system that enables the ICSO to govern, coordinate, and evolve cybersecurity in a complex, interdependent, and changing industrial environment. SG2CI does not intend to replace standards such as IEC 62443, ISO 27001, or the NIST CSF 2.0. SG2CI is an evolution of SGCI, […]

This document analyzes the DR² Model from the Center for Industrial Cybersecurity, a framework designed to govern critical decision-making under uncertainty in IT/OT environments. Unlike classic models, this approach separates technical capability from the legitimacy to decide, directly linking authority to actual impact and the “pain” assumed. Through four fundamental states (M-I-D-E) and ten essential […]

This guide addresses the interpretation of the Esquema Nacional de Seguridad (ENS) in operational technology (OT) environments without altering regulations or introducing operational risks. It translates the ENS objectives into the physical and industrial reality, separating “what” the framework requires from “how” it is executed. It prioritizes availability and process integrity, validating the use of compensatory and organizational controls specific to the plant. […]