Publicaciones Publications
Pocket Guide: Reducing risks incurred by OT cybersecurity controls
It is crucial that each cybersecurity control or measure that we implement includes a constant re-evaluation of the associated risks since security is a dynamic and constantly evolving process, which requires us to be ready to adjust and continually improve our strategies.
CCI has made this pocket guide available, which addresses the most common risks linked to the seven main cybersecurity measures in automation and industrial control environments. This analysis will allow an understanding of the potential threats to which we are exposed and, in turn, will facilitate the implementation of effective strategies to protect critical systems in these operating environments.
The 7 main cybersecurity measures that we will address in this guide are:
1 – Network Segmentation
2– Access controls and authentication
3– Updates and patches
4– Data backup and restoration
5– Monitoring and recording of events
6– Protection against malware
7– Incident response
Available free of charge to active members and active members with subscription from the Knowledge Platform.
Title
07/07/2026
This guide presents the SG2CI, an industrial cybersecurity governance and management operating system that enables the ICSO to govern, coordinate, and evolve cybersecurity in a complex, interdependent, and changing industrial environment. SG2CI does not intend to replace standards such as IEC 62443, ISO 27001, or the NIST CSF 2.0. SG2CI is an evolution of SGCI, […]
06/07/2026
This document analyzes the DR² Model from the Center for Industrial Cybersecurity, a framework designed to govern critical decision-making under uncertainty in IT/OT environments. Unlike classic models, this approach separates technical capability from the legitimacy to decide, directly linking authority to actual impact and the “pain” assumed. Through four fundamental states (M-I-D-E) and ten essential […]
23/06/2026
This guide addresses the interpretation of the Esquema Nacional de Seguridad (ENS) in operational technology (OT) environments without altering regulations or introducing operational risks. It translates the ENS objectives into the physical and industrial reality, separating “what” the framework requires from “how” it is executed. It prioritizes availability and process integrity, validating the use of compensatory and organizational controls specific to the plant. […]
09/06/2026
This document analyzes the Industrial Cybersecurity Maturity Model and its digital platform MACIN, developed by the Industrial Cybersecurity Center (CCI) in its 2026 edition. The model is specifically designed for OT environments and aligned with C2M2 v2.1, structuring itself into 10 domains, 45 objectives, and 175 practices evaluated through five maturity levels and four dimensions: processes, technology, people, and results.