Back ZIUR and The Gipuzkoa Provincial Council launch the first acceleration program for compliance with European regulations on cybersecurity of connected industrial products

2025 / 10 / 31
Programa, Gipuzkoan presentzia duten eragileen lankidetzari esker eratutako Market Place baten bidez garatuko da.

The Gipuzkoa Provincial Council launch the first acceleration program for compliance with European regulations on cybersecurity of connected industrial products

The program will be developed through a marketplace, created thanks to the collaboration of stakeholders with a presence in Gipuzkoa

The Gipuzkoa Provincial Council, through its public foundation ZIUR (Industrial Cybersecurity Center), has launched the Acceleration Program for compliance with European cybersecurity regulations for connected industrial products. With a budget of 3 million euros, it aims to strengthen the competitiveness and innovation of Gipuzkoa's business sector. This pioneering initiative was created to help Gipuzkoa manufacturing companies accelerate and prepare for compliance with various European regulations affecting connected industrial products.

The program will be developed through a marketplace, established through the partnership and collaboration of various stakeholders with a presence in Gipuzkoa, forming the necessary ecosystem to provide services that enable companies to comply with the new regulations. Key stakeholders involved in the project include Telefónica, Thales S21SEC, and Orbik, with the collaboration and interest of Vicomtech, Ikerlan, the Mondragon Corporation, and AFM.

“The Gipuzkoa Provincial Council views this project as a key initiative to ensure the competitiveness of our business sector and enhance its value proposition in the market,” stated Unai Andueza, Deputy for Economic Promotion and Strategic Projects, who explained that from now on, Gipuzkoa and Basque companies "will no longer have to look elsewhere for this service, which will foster new commercial activity within the region".

Thanks to this initiative, organizations will have the opportunity to have their industrial products' cybersecurity assessed free of charge, allowing them to get ahead of the curve and take decisive steps toward complying with new regulations coming into force in Europe. Among the new regulations are the CRA (Cyber ​​Resilience Act), which establishes mandatory cybersecurity requirements for products with digital elements marketed in the EU; UNECE R-155 and ISO 21434, which affect the automotive sector; the MDR, which concerns medical devices; and the RED, which applies to radioelectric devices.

“This ‘Marketplace’ aspires to grow and incorporate new companies that want to join this leading ecosystem,” stated María Penilla, CEO of ZIUR. In addition to a regular service that will include the dissemination of certification activities, training workshops, and sector-specific regulatory advice, this project aims to evaluate the cybersecurity of connected products developed in Gipuzkoa, conduct audits of industrial components, and manage technical vulnerabilities, among other things.

To this end, the stakeholders involved in this initiative will provide companies with access to three industrial cybersecurity laboratories and 10 professional cybersecurity experts specializing in OT, IoT, or IoMT, throughout the 24 months of the project. ZIUR aims to evaluate up to 80 products per year through this project.

The program is aimed at companies that develop connected products and have their registered office or tax domicile in Gipuzkoa. To participate, an application must be submitted at https://www.ziur.eus/es/observatorio/proyecto-evaluacion-producto-industrial

Generating short-term progress

The initiative aims to position the region in an area identified by the European Union as a key driver of competitiveness. Due to the significant number of industrial companies in Gipuzkoa, and their strategic importance to the region's economy, the project is of strategic importance to the Gipuzkoa industrial sector.

In this regard, the project is expected to have a very high short- to medium-term impact on Gipuzkoa's industrial cybersecurity promotion strategy, as it will help create an activity for the evaluation and certification of cybersecurity for industrial products. This will enable the region's industrial sector to position itself more competitively in a global market and anticipate upcoming regulatory and market requirements.

The project objectives are as follows:

  • To make the Gipuzkoa region a national and international leader in cybersecurity assessment of industrial components/devices
  • To promote the adoption of technical and human capabilities by the supply side (companies providing Industrial Cybersecurity services).
  • Create a collaborative and open Marketplace in Gipuzkoa, specializing in cybersecurity assessments.
  • Help the industrial sector in Gipuzkoa understand and meet the cybersecurity needs of its market and the various regulatory requirements it must comply with.