Solicitar documento

Para descargar este documento debe ser miembro con acceso a entregables. Si ya es miembro, puede descargarlo desde nuestra plataforma NGLibrary.

Document request

If you are interested in this document, you can ask for it at info@cci-es.org or register freely in our platform as a member able to access to deliveries.

Industrial CRA Position Paper (Multisectoral)


The new Industrial CRA Position Paper* from the Industrial Cybersecurity Center highlights a critical need: adapting the European Cyber Resilience Regulation to the reality of OT environments. Critical infrastructures, legacy systems, decades-long life cycles, and the absolute priority of availability make it impossible to apply the CRA as currently designed. The document proposes a multisectoral guide that enables realistic, proportional compliance focused on operational security, establishing clear responsibilities among manufacturers, integrators, and operators, and ensuring that cyber resilience advances without compromising industrial continuity.

*Please note the document is in Spanish

Are you not yet a member of the Industrial Cybersecurity Center?

Register here.

You can purchase this document on our NGLibrary
24/11/2025

Title

Study on the Maturity of Food Sector Organizations Facing High-Impact Cyber Incidents

19/10/2026

This study analyzes the maturity level of food sector organizations against high-impact cyber incidents, understood as their actual capability to protect, sustain, and recover their critical industrial processes. The study combines an industry survey on the operational, food safety, financial, reputational, environmental, and regulatory impact of various cyber incidents with an industrial cybersecurity maturity assessment […]

Technological [industrial] evolution is a bodge (AI included)

01/10/2026

This document analyzes how technological and industrial evolution is not the result of perfect designs, but of a cumulative process of patches, adaptations, and dependencies that generate digital fragility. Through five strategic rules and a common language (D-P-R), it proposes transforming this inevitable imperfection into operational resilience and human sovereignty.

Guide to Adapting and Evolving the SOC in Industrial Automation and Digitalization Environments

09/09/2026

This guide does not intend to define a single model for a Cybersecurity Operations Center, but rather to provide criteria, capabilities, recommendations, and best practices to build, evolve, or adapt a SOC progressively, aligning it with the operational reality of each industrial organization.

SG2CI: The operating system for the ICSO

07/07/2026

This guide presents the SG2CI, an industrial cybersecurity governance and management operating system that enables the ICSO to govern, coordinate, and evolve cybersecurity in a complex, interdependent, and changing industrial environment. SG2CI does not intend to replace standards such as IEC 62443, ISO 27001, or the NIST CSF 2.0. SG2CI is an evolution of SGCI, […]