Publicaciones Publications
Pocket Guide: Reducing risks incurred by OT cybersecurity controls
It is crucial that each cybersecurity control or measure that we implement includes a constant re-evaluation of the associated risks since security is a dynamic and constantly evolving process, which requires us to be ready to adjust and continually improve our strategies.
CCI has made this pocket guide available, which addresses the most common risks linked to the seven main cybersecurity measures in automation and industrial control environments. This analysis will allow an understanding of the potential threats to which we are exposed and, in turn, will facilitate the implementation of effective strategies to protect critical systems in these operating environments.
The 7 main cybersecurity measures that we will address in this guide are:
1 – Network Segmentation
2– Access controls and authentication
3– Updates and patches
4– Data backup and restoration
5– Monitoring and recording of events
6– Protection against malware
7– Incident response
Available free of charge to active members and active members with subscription from the Knowledge Platform.
Title
15/04/2026
This document analyzes OT cybersecurity risks in the railway sector, considered an essential infrastructure. Through expert assessment, it models two key attacks: traffic management intrusion and “trackside” system manipulation. The report details the phases of these incidents, from initial access to systemic impact on operations. Finally, it proposes strategic solutions under the IEC 62443 standard […]
24/11/2025
The new Industrial CRA Position Paper from the Industrial Cybersecurity Center highlights a critical need: adapting the European Cyber Resilience Regulation to the reality of OT environments. Critical infrastructures, legacy systems, decades-long life cycles, and the absolute priority of availability make it impossible to apply the CRA as currently designed. The document proposes a multisectoral […]
22/10/2025
This document, titled “Pocket Guide: Questions to Ask Your Industrial Technology and Service Providers About Their Cybersecurity Capabilities,” developed by the Industrial Cybersecurity Center (CCI), provides a structured set of questions designed to help organizations assess the level of maturity and commitment to cybersecurity among their industrial suppliers.
