The Industrial Cybersecurity Center in Spain

Team

Vicente Asensi

Technical Systems Engineer, specialist in Cybersecurity, IT Governance, Risks and Normative Compliance, with more than 20 years of experience in the field of IT Management in various companies of the industrial sector, he is an expert in the management of consulting and auditing projects In Management and Regulatory Compliance Systems such as ISO 27001, ISO […]

Pablo Ballarín

Pablo Ballarín is Cybersecurity advisor and Virtual CISO in relevant organizations. Specialization in support of CISOs, IOT and Industrial cybersecurity, and also in the ethical aspects of AI solutions. Co-founder of Balusian, a provider of IT services and cybersecurity consulting, conducting multiple investigations within the area of IoT cybersecurity and in Smart Cities. He is […]

Óscar Bou

Certification and Consultant in Government and IT Risk Auditor, IT / OT Security and Normative Compliance. With extensive experience since 2000 in Consulting and Audit of Information Security Management Systems, Industrial Cybersecurity and Business Continuity, in very relevant public and private organizations, in the Industrial, Financial, Distribution and Services sectors, both at National and multinational […]

Maite Carli García

Maite Carli is Communication Manager and European Coordinator at the Industrial Cybersecurity Center. Specialized in administration of networks and communications, industrial critical infrastructures, industry 4.0, data analysis technologies in the Health sector and industrial cybersecurity, having done several courses and a master. She has developed his professional career during the last 9 years in the […]

Juan Miguel Pulpillo

Cyberintelligence and Cybersecurity Analyst, DPO, Compliance Officer and Lawyer-Auditor of Technological Environments certified by the Bar Association of Barcelona. Certificate Auditor GRC of Tüv Nord (Good Government, ISO 19600, ISO 31000, TÜV NORD procedure, TN 15. Certification GRC). Master in Telecommunications Law and Information Technology from the Carlos III University of Madrid, with a business […]

José Valiente

José Valiente is General Manager and Manager of Coordination and Communication at the Industrial Cybersecurity Center. B.S. on Computer Science by the Universidad Pontificia of comillas, is a specialist in Security and Technology Consultancy. With more than 20 years of experience in consulting firms as Davinci Consulting and Tecnocom involved in projects related to IT […]

Jose Luis Laguna

Jose Luis Laguna has more than 20 years of experience in engineering, he has been director of systems and CISO in the Técnicas Reunidas Group, one of the largest engineering companies in the world, specialized in the construction of oil and power plants. He currently leads the Fortinet engineering team for Spain and Portugal.

Jose Luis Jiménez Izquierdo

Experto en Ciberseguridad, Ponente y Cibercooperante de INCIBE (TOP 20 en 2016), Consultor Senior homologado por EOI, Miembro de ISACA Madrid Chapter, además de Apasionado de la Expert in Cybersecurity, Speaker and Cibercooperator of INCIBE (TOP 20 in 2016), Senior Consultant approved by EOI, Member of ISACA Madrid Chapter, as well as Passionate about Cybersecurity […]

José A. Cascallana Arroyo

Since early 2018 I have developed my professional activity in Telefónica Digital de España – ElevenPaths in the area of ​​Strategic Alliances and Own Product Development, I am currently the Manager of C4IN R&D Cybersecurity Center, the Innovation Center specialized in industrial cybersecurity that Telefónica España and ElevenPaths have Created in the city of León. […]

Joan Figueras

Graduated in Electronic Industrial Engineering and Master in Information and Communication Systems Management, he has more than 20 years of experience as head of IT departments in several companies in the services sector, specializing during the last decade in cybersecurity and information protection. He is a Technological Judicial Expert certified by the ACPJT (Catalan Association […]

Jesús Mérida

He holds a degree from the Autonomous University of Madrid and a Master’s Degree in Telecommunications from the UPM, developing a large part of his IT career in the logistics sector in large multinationals such as Exel Logistics, DHL or Grupo Lagardere in various management functions in the areas of Technology . At present it […]

Javier Zubieta

Javier Zubieta is Director of Private Security from UNED and Bachelor of Computer Science from UPM. With more than 20 years of experience in Cybersecurity, Javier is currently Head of Cybersecurity Business Development at GMV and professor of the Master of Cybersecurity and Privacy at the Rey Juan Carlos University. Previously, he was Director of […]

Javier Cao Avellaneda

Computer Engineer from the University of Murcia, since 1999 he develops his professional career focused on the disciplines related to the government of security information and risk management. Thanks to his long career, he has had the opportunity to model and analyze risks in all types of organizations and sectors (Logistics, Food Manufacturing and Distribution, […]

Enrique Martín

Enrique Martín is OT Business Development Consultant at TITANIUM. He has more than 25 years of experience in IT / OT technologies, most of them in security projects in the private and public sector. He has participated in European projects such as SCADALAB with the Spanish Institute of Cybersecurity (INCIBE) and CAMINO and EUCONCIP of […]

Eduardo Pérez

Eduardo Pérez is currently working as CISO in TSK. With 17 years of experience in the world of IT consulting, he has participated and led cybersecurity projects not only in the IT ecosystem (financial sector, transport and logistics, public administration, etc.) but also in OT (generation and transport sector of energy, food and drinks, metal, […]

Edorta Echave

He is a Senior Technician in Computer Systems and Telecommunications and “Specialist in Network Design and Security” from the Public University of the Basque Country. He has directed his professional career around communications infrastructures, reaching certifications such as CCNA, ITIL, SIEMENS CPIN Security, Nozomi Networks Certified Engineer, and specific training in security products and solutions. […]

Belén Pérez

Coordinator of the Industrial Cybersecurity Center for the region of Galicia. Network and Cybersecurity Engineer at Balidea Consulting & Programing.2nd member of the Official Association of Industrial Technical Engineers of Vigo. He has developed his professional career since 1999 in the IT world in Communications Operators and Consultants performing tasks of O & M, QA, […]

Belén Pérez

Belén Pérez is Coordinator of the Industrial Cybersecurity Center for the Galicia region. CISO at Grupo Nueva Pescanova. 2nd Member of the Official College of Industrial Technical Engineers of Vigo. She has developed her professional career since 1999 in the IT world in Communications Operators and Consultants performing tasks of O&M, QA, IT Project Management, […]

Mr. Jose Valiente, the Industrial Cibersecurity Center Coordinator in Spain (CCI Coordinators Team), helps us to get in context of the state of the industrial cybersecurity in his country, and to do so, he shares with us his impressions.

He describes the level of sensitivity of industrial organizations in his country according to the following percentages:

He also affirms that the trend of recent years has been a slight increase.

Spain counts with local and national public bodies promoting an adequate legal framework, in order to ensure the progressive incorporation of industrial cybersecurity measures in national presence companies (mainly critical infrastructure). The main organizations are:

  • CNPIC (NATIONAL CENTER FOR CRITICAL INFRASTRUCTURE PROTECTION)
  • INCIBE (NATIONAL INSTITUTE OF CYBER SECURITY)
  • CERTSI (SAFETY AND INDUSTRY CERT) FORMED BY CNPIC E INCIBE

Among the main national laws and regulations affecting in this context in Spain, Jose Valiente mentions:

  • CRITICAL INFRASTRUCTURE PROTECTION LAW
  • NATIONAL CYBERSECURITY STRATEGY
  • ENCI (NATIONAL CYBERSECURITY INDUSTRIAL SCHEME)

Analysing the most widely adopted industrial cybersecurity measures by Spanish organizations to protect industrial automation systems, Jose Valiente highlights the application of:

  • Network security measures (firewalls and IDS)
  • Certified antivirus
  • Backups

The CCI Coordinator in Spain characterizes the industrial cybersecurity situation in his country with the following SWOT analysis:

Weaknesses

  • Lack of operational technologies certifications, processes and professionals

  • Lack of specific industry cybersecurity legislation

Strengths

  • Public organizations driven force (industry, national issues and defence).

  • Significant industrial cybersecurity innovation projects

  • Awareness, especially regarding industrial critical infrastructures

  • Frequent events and forums on industrial cybersecurity

  • Increase of Industrial cyber security trained professionals

  • Leadership and recognition in the international markets

  • National industrial cybersecurity specific CERTs

  • Solutions and services catalogue in industrial cybersecurity

Threats

  • Application of IT security measures without discretion

  • High development of industrial applications without cybersecurity requirements/li>
  • Slow legislation

  • Shortage of local industrial cybersecurity professionals working for manufacturers

  • Shortage of specific industrial cybersecurity risk management tools

Opportunities

  • Increased of cibersecurity demand for Industry 4.0 and the Internet of things.

  • Advantage with the lessons learned from smart grid cibersecurity.

  • Strategic position in the industrial cyber security sector

Activities

“The Voice of de Industry”: The Industrial Cybersecurity Situation in Spain

Industrial Cyber ​​Security First event “The Voice of Industry” to be held on June 20 in Madrid (C / Arapiles, 14) and where are the major players in the industry (Energy, Chemicals, Transportation, Water, …) to count their experiences and show their solutions.

1st Ibero-American Industrial Cybersecurity Center Congress: 2 and 3 October, Madrid (Spain)

As part of its activity, the Industrial Cybersecurity Center (CCI) organized the 1st Ibero-American Industrial Cybersecurity as reference event for the Spanish market of Industrial Cybersecurity and as a meeting point for the exchange of knowledge, experiences and relationships of all stakeholders in this area..

A demanding public at the last meeting of The Voice of Industry 2015 held in Madrid

On December 16 Industrial Cyber ​​Security Center (CCI) held the twelfth meeting of the Voice of Industry in Spain called “Experience managing the Industrial Cybersecurity. Technical and organizational measures”. This appointment was the fifth meeting of 2015, after those held in February, May, September and November. With this series of meetings, CCI intends to act […]

A hundreds of attendees joined us at the meeting of “The Voice of Industry” celebrated on May 5

In this meeting in Madrid last May 5, we were able to examine for the first time the “Cybersecurity in the design” through each stage of a project of industrial automation.

Attendees starring the third event of the Voice of Industry celebrated on 21 November

The celebration of the third Industrial Cybersecurity event has been distinguished by the participation of the attendees. There have been many interesting questions made to different speakers. El evento se ha celebrado en el Hotel Melia Avenida de América, reuniendo a más de 60 profesionales de la industria con el siguiente reparto de asistencia.

CCI celebrates the first edition of the practical workshop on February 20 in Barcelona: Forensic Analysis in an industrial automation environment

CCI will hold in Barcelona its first edition of the workshop based on a case study to learn how to perform a forensic analysis in an environment of automation and industrial control. The guide of good practices in the forensic analysis of automation and industrial control systems that will be part of the material of […]

CCI has celebrated the X meeting of the Voice of Industry, physically in Bilbao and virtually ecosystem Members

On May 13 there was a new meeting of The Voice of Industry, this time moved from its usual place in Madrid to Bilbao vanguard, as site concerning industrial innovation. Two other developments were broadcasting of the meeting via the Internet and a table discussion where one of the participants did virtually, also through Internet.

CCI held in Bilbao the workshop addressed to the Responsible for Cybersecurity in Critical Industrial Infrastructures

On March 21 and 22, in Bilbao, the Industrial Cybersecurity Center held a new edition of the workshop to implement an Industrial Cybersecurity Management system based on both a risk analysis and a cybersecurity diagnosis.

CCI held in November the 16th edition of the Multidisciplinary Course on Industrial Cybersecurity and Protection of Critical Infrastructures 2017

This edition has been held on 21, 22 and 23 November 2017 in Madrid. Hotel Meliá Avenida de América (C / Juan Ignacio Luca de Tena, 36) This course has guided participants through the study of the state of the art of the Protection of Critical Infrastructures and Industrial Cybersecurity around the world, both in […]

CCI held in November the XVII edition of the Multidisciplinary course of Digital Security in Industry [4.0] and protection of essential services

Esta edición ha tenido lugar los días 13, 14 y 15 de noviembre de 2018 en Madrid. Hotel Meliá Avenida de América (C/ Juan Ignacio Luca de Tena, 36). 148/5000 This edition took place on November 13, 14 and 15, 2018 in Madrid. Hotel Meliá Avenida de América (Calle Juan Ignacio Luca de Tena, 36).

CCI held its 4th edition of the practical workshop: Application of an Industrial Cybersecurity Management System, on December 12 in Madrid

CCI held its fourth edition of the workshop in Madrid based on a case study to implement an Industrial Cybersecurity Management system. The guidance for the construction of an SGCI was applied in a practical way, in which specific guidelines of the ISO27001 and IEC62443 standards were contemplated, for an effective and continuous treatment of […]

CCI held on March 21 in Bilbao the meeting of “La Voz de Industria Vasca” where a previous study of cybersecurity was presented

In this meeting held in Bilbao, at the Hotel Silken Indautxu, the preliminary results of the study on cybersecurity in Basque industry were presented for the first time. More than 75 responses have been received to the questionnaire provided to industrial companies, which will allow the publication of a final study that will reflect the […]

CCI holds its VII International Congress of Industrial Cybersecurity with major European participation, 5 and 6 October

We can proudly say that this new appointment CCI has become another year in one of the most relavantes the international scene for the quality of its contents and speakers. As a fundamental part of its activity, the Center for Industrial Cybersecurity (CCI) has organized the VII International Congress of Industrial Cybersecurity [4.0], as one […]

CCI participation in the STIC CCN-CERT Conference 2019

The STIC CCN-CERT Conference, organized by the Cybersecurity Department of the National Cryptological Center, has been held without interruption since 2007.

CCI publishes the pocket guide “Cybersecurity in the Industrial Automation Pyramid”

This guide shows quickly and visually the main vulnerabilities that could exist in the 5 levels of the pyramid of industrial automation and the most recommended measures of protection. The technologies used in the automation and management of productive processes are represented in the so-called “Automation Pyramid”, which includes the five technological levels that can […]

CCI will hold in Galicia its first meeting of “La Voz de la Industria” on September 20

CCI will hold a meeting at the Hotel Pazo Los Escudos, Avenida Atlántida, 106 in Vigo, aimed at the Galician industry, presenting for the first time the preliminary results of the study on the state of cybersecurity in the industry of Galicia.

Curso Multidisciplinar de Ciberseguridad Industrial y Protección de Infraestructuras Críticas 2015

14th Edition. To be held on november 10th-12th, in Madrid. Hotel Meliá Av. América (c/Juan Ignacio Luca de Tena, 26)

Cybersecurity awareness of managers, key idea of the XVII Meeting “The Voice of Industry” held on May 4

The Center for Industrial Cyber Security has presented its study “Benefits of cybersecurity for industrial enterprises”

Document: “Best Practices for cybersecurity diagnosis in industrial environments”

The document explains how to perform a cybersecurity diagnosis in industrial environments through the identification of weak spots and the proposal of correctiva actions.

El pasado 24 de marzo iniciaron su actividad los tres equipos de conocimiento del CCI

Last March 24 was held in Madrid, Spain, the first meeting of the year of the CCI’s Knowledge Teams. This activity gathers a reduced number of Active Members around a specific topic to cover all the aspects related to improving cybersecurity. Currently there are three active groups: Engineering or EPC Groups, Smart Metering and Critical […]

Encuentro de la Voz de la industria celebrado en Gijón el 7 de noviembre de 2019

CCI held a meeting aimed at the Asturian industry at the Abba Playa Gijón hotel, Paseo Dr. Fleming, 37, Gijón, presenting for the first time the preliminary results of the study on the state of cybersecurity in the Asturias industry.

Excellent reception of CCI ecosystem in the first meeting held on 8 September in Barcelona

At this meeting, we held in Barcelona, ​​in the Hotel H10 Casanova, has been examined for the first time the benefits of ICS Cyber ​​Security, with a new perspective for senior management.

Excellent XV edition of the Multidisciplinary course on Industrial Cyber Security and Protection of Critical Infrastructures 2016

This edition was held on 22, 23 and 24 November 2016 in Madrid. Hotel Meliá Avenida de América (C / Juan Ignacio Luca de Tena, 36) This course has led the participants through the study of the state of the art of Critical Infrastructure Protection and Industrial Cyber Security throughout the world, both in terms […]

First Cybersecurity game in Spanish. An awareness tool for kids, professionals and senior managers

The Industrial Cyber Security Center has created the first cyber security board game, in Spanish, in which you play a cyber security investigator who has to use his power of deduction to discover where, how, why and who provoked the cyber security event that has paralysed an industrial plant.

First day of Security in Hospitals 4.0 held on July 10

On July 10th, we celebrated the first joint ICC and Red Seguridad meeting aimed at the health sector. The Spanish health model is based on a framework of “Integral Health” with a clinical history shared by the different health actors and accessible by the patient.

First meeting of “La Voz de la Industria Andaluza” on April 11 in Seville

In this meeting that we will celebrate at the Sevilla Center Hotel, the preliminary results of the study on the state of cybersecurity in the Andalusian industry will be presented for the first time.

First meeting of La Voz de la Industria held in Castilla y León on September 22 in virtual format

CCI has held a virtual meeting aimed at the industry of Castilla y León, presenting for the first time the preliminary results of the study on the state of cybersecurity in the industry of Castilla y León.

Great intellectual caliber and experiences at the IX International Congress held on October 4 and 5, 2017

As a fundamental part of its activity, the Center for Industrial Cyber Security (ICC) held its IX International Congress on Industrial Cybersecurity in Europe, one of the events of reference for the European market, and a meeting point and exchange of knowledge, experiences and relations of all the actors involved in this field

III Congress: The importance of a multidisciplinary ecosystem for industrial cybersecurity

“Lets make visible the invisible and assume that we are going to be attacked…” This sentence by expert Ayman Al-Issa summarizes the work held during the third Ibero-American Industrial Cybersecurity Congress; a very intense week full of hard work, information exchange, novelties and interesting discussions.

III Ibero-American Industrial Cybersecurity Congress 7 & 8 October 2014 Hotel Meliá Avda. de América Madrid (Spain)

After the success of the first Ibero-American Industrial Cybersecurity Congresses held in Madrid (Spain) on October 2nd and 3rd, 2013, and in Bogotá (Colombia) on 27th and 28th May 2014, with almost 350 attendees from different sectors of the industry, that have become the most relevant international reference in industrial cybersecurity, the Industrial Cybersecurity Center […]

INTECO Launches a course in Industrial Automation and Control Systems Cyber Security

Starts on October 27 in order to provide cyber security experts with the necessary expertise in automation and control systems

Meeting “La Voz de la Industria” in Catalonia. February 21, 2019

CCI will hold a meeting at the H10 Casanova Hotel, Gran Via de les Corts Catalanes, 559, in Barcelona, presenting for the first time the preliminary results of the study on the state of cybersecurity in the industry of Catalonia.

Meeting of La Voz de la Industria held in Valencia on April 4, 2019

CCI held at the Hotel Tryp Valencia Oceanic, Carrer del Pintor Maella, 35, Valencia, a meeting aimed at the Valencian and Murcian industry, presenting for the first time the preliminary results of the study on the state of cybersecurity in the industry of the Valencian Community and Murcia.

Meeting of The Voice of the Galician Industry. Held on September 24 in virtual format

CCI has held a virtual meeting aimed at the Galician industry, presenting the study on the state of cybersecurity in the Galician industry, recently published.

On May 8, CCI held the XXIV meeting of “La Voz de la Industria” in Madrid

This meeting involved cybersecurity officials from different industrial organizations and sectors, public authorities and specialists in cybersecurity with the aim of sharing some of their own experiences with the attendees. The meeting was divided into five thematic areas:

Practical Workshop: Application of an Industrial Cybersecurity Management System, September 20 in Valencia

CCI will hold its third edition of the workshop based on a case study to implement an Industrial Cybersecurity Management system. The guideline for the construction of an ICMS will be used in a practical way, in which specific guidelines of the ISO27001 and IEC62443 standards have been applied for an efficient and continuous treatment […]

Published document: Business impact of using not supported software

The concept of industrial software extends beyond automation applications, also includes documentation, data handling and product support necessary to ensure proper performance and eliminate errors, mistakes and weaknesses of security, ie, should provided An essential to ensure business operations “resilient software.”

Released the document “Status of Industrial Cybersecurity in Spain 2013”

The document on the State of the Industrial Cybersecurity in Spain provides a realistic and precise vision of the state of cybersecurity in Spain contemplating Industry areas such as organization and management, technical aspects and market expectations.

Second event “The Voice of the Industry”: “Linking Industrial Cybersecurity and Critical Infrastructures Protection”

On September 12th, was held the second event “The Voice of Industry” organized by the CCI, which this time had the title of “Linking Industrial Cyber Security and Critical Infrastructure Protection “.

September 12. The Voice of the Industry, Linking Critical Infrastructure Protection and Industrial Cybersecurity

An approach on how to face the new law and plans to protect complex infrastructure automation systems

Success of the first training in spanish language on ISA99 implementation

The training, organised by ISA España and performed by the CCI, had attendees of companies from sectors such as the nuclear, water, energy, engineering, oil & gas.

Thank you for the excellent presentations at the two-day V International Congress of Industrial Cybersecurity

More than 200 attendees in the fifth edition of the International Congress of Industrial Cyber Security

The first Ibero-American Industrial Cybersecurity Congress has taken place

The celebration of the first Ibero-American Industrial Cybersecurity Congress has been a great success of attendance as well as of contents. For the first time in Ibero-america, actors from every scope related to Industrial Cybersecurity have been reunited in a common ground.

The new regulations, the role of CSIRTs and experiences, keys to the XX Meeting “The Voice of Industry” held on September 21

The Center for Industrial Cybersecurity presented its study “European Industrial Cybersecurity Regulatory Landscape” and its tool “Evaluation of Maturity of the Process of Cybersecurity in Industrial Organizations”

The Spanish Industrial Organizations Trully Share their Experiences. Summary of the Event held last February 11th, 2015

“Fresh and new air”; this has been the general opinion of the attendants to the Industrial Cybersecurity Center event, held last February 11th in Madrid. This activity gathered about 80 profesionals willing to learn about the maturity of some industrial organizations in relation to their cybersecurity capabilities.

The Voice of the Industry: 97% of attendees support total or partial disclosure of vulnerabilities in ICS

For the first time in the year, we have met to discuss one of the hottest topics currently in cybersecurity: The disclosure of vulnerabilities in Industrial Control Systems. Every day, more sectors (logistics, transportation, water, among others) are present in The Voice of the Industry events.

The voice of the industry: Examples of collaboration and the needs of end users

The last event organised by the CCI in 2013 has showed that Industrial Cybersecurity is a team effort.

The voice of the Industry. The state of Industrial Cybersecurity in Spain

The main actors of the industry reunited to discuss on Industrial Cybersecurity

V International Congress of Industrial Cybersecurity, 6 & 7 October 2015 Hotel Meliá Avenida de América, Madrid (Spain)

We celebrated our V International Congress of Industrial cybersecurity, and after the success achieved in the previous four (two in Madrid, one in Bogotá and one in Buenos Aires) has become the quality of its contents and speakers at the most important international conference on the subject in the Hipano-speaking world,

Virtual Meeting of the Voice of the Andalusian Industry held on June 18, 2020

CCI has held, in virtual format, a meeting aimed at the Andalusian industry, presenting for the first time criminal prevention against technological crimes in industrial environments in accordance with compliance models.

VIRTUAL Meeting of the Voice of the Industry “Cybersecurity in Industrial Digitalization” held on June 25 and 26, 2020

300/5000 CCI has held, in virtual format, a meeting aimed at the industry to share experiences on cybersecurity in the NEW industrial digitization, the guide, under construction, Cybersecurity in the Life Cycle of an Industrial Digitizatio …

XI International Industrial Cybersecurity Congress in Europe. It has celebrated on October 10 and 11, 2018

As a fundamental part of its activity, the Industrial Cybersecurity Center (CCI) has celebrated its XI International  Industrial Cybersecurity Congress, in Europe, one of the reference events for the European market, and a meeting point and exchange of knowledge, experiences and relationships of all the actors involved in this field.

XIII International Congress of Industrial Cybersecurity in Europe, on September 24 and 25, 2019, in Madrid

As an essential part of its activity, the Industrial Cybersecurity Center (ITC) has held its XIII International Congress of Industrial Cybersecurity, in Europe, one of the reference events for the European market, and meeting point and exch ..

XV International Industrial Cybersecurity Experiences Congress. Held from September 29 to October 1 in VIRTUAL format

The Industrial Cybersecurity Center (CCI) will hold its XV International Congress on Industrial Cybersecurity, in Europe, one of the reference events and meeting point for the exchange of knowledge and relationships of all the actors involved in this field. This year will be focused on sharing great value experiences.

XXX Meeting of the Voice of the Industry held in Madrid on May 7, 2019

In this meeting, cybersecurity officials have participated in industrial manufacturers, industrial organizations and cybersecurity specialists to share knowledge and experiences about the digital industry with attendees.