The Industrial Cybersecurity Center (Centro de Ciberseguridad Industrial: CCI), mindful of the need for a specification to aid in setting up cybersecurity management systems in companies of the industrial sector, has drawn up a Guide for Building an Industrial Cybersecurity Management System (Guía para la construcción de un SGCI (Sistema de Gestión de la Ciberseguridad Industrial)). This guide fills in the legal loopholes, especially in terms of the management of cybersecurity in industrial-control and automation systems.

Javier Zubieta, Head of Cybersecurity Business Development in GMV Secure e-Solutions, has helped to draw up this guide, together with a team of professional experts from the CCI ecosystem. He describes this document as “unique of its kind” and has also dubbed it “the Bible” of Industrial Cybersecurity.

This guide aims to furnish industrial-control and automation-system stakeholders with the wherewithal for setting up efficient and ongoing management of any risks threatening the availability, integrity and confidentiality of the operations and information managed by these systems, in line with the particular organization’s strategic needs. The guide has therefore been structured into 6 sections: