Publicaciones Publications
Publication of the Business Case of Industrial Cybersecurity notebook
Those responsible for industrial cybersecurity must counter threats and plan based on continuous improvement, in line with the continuous technological and other changes that companies face in order to be competitive.
To prepare a project, or rather, to start it, in many occasions it implies substantial changes in the company and / or the need to do a CAPEX. For the latter, internal conformity is needed. And to obtain it, the most widely used means is to submit the project for formal approval through a business case.
There is not normally the figure of an OT cybersecurity manager in industrial organizations, which implies that another role assumes this responsibility, for example, in some organizations the operational security manager or the physical security manager assumes this responsibility, in other organizations it is the person in charge of operations or the person in charge of communications, although it is the person in charge of information security who is usually in charge of industrial cybersecurity. This situation has been taken into account in the development of this document.
This document is available to active subscription members of CCI at the knowledge platform.
The document can be acquired by requesting it from info@cci-es.org
Title
15/04/2026
This document analyzes OT cybersecurity risks in the railway sector, considered an essential infrastructure. Through expert assessment, it models two key attacks: traffic management intrusion and “trackside” system manipulation. The report details the phases of these incidents, from initial access to systemic impact on operations. Finally, it proposes strategic solutions under the IEC 62443 standard […]
24/11/2025
The new Industrial CRA Position Paper from the Industrial Cybersecurity Center highlights a critical need: adapting the European Cyber Resilience Regulation to the reality of OT environments. Critical infrastructures, legacy systems, decades-long life cycles, and the absolute priority of availability make it impossible to apply the CRA as currently designed. The document proposes a multisectoral […]
22/10/2025
This document, titled “Pocket Guide: Questions to Ask Your Industrial Technology and Service Providers About Their Cybersecurity Capabilities,” developed by the Industrial Cybersecurity Center (CCI), provides a structured set of questions designed to help organizations assess the level of maturity and commitment to cybersecurity among their industrial suppliers.
