ZIUR shares its experience with the new regulations at the CCIcon Europe Congress.
ZIUR Director General María Penilla took part in Seville in a panel discussion on the present and future of OT regulation and its impact on industrial plants
ZIUR took part in the 27th edition of the International Industrial Cybersecurity Congress of Europe, organised by the Industrial Cybersecurity Centre (CCI), which was held in Seville on 23 and 24 September. The event brought together companies and professionals to analyse the main challenges involved in protecting industrial environments and to share experiences and strategies for addressing emerging threats.
As part of the congress, María Penilla took part in the panel “The present and future of OT regulation and its real impact on industrial plants”, alongside Luis Manuel Jiménez Ruiz, Head of the Automation and Control Group at Aljarafesa’s Production Service, and Juan Miguel Pulpillo, Legal Compliance Expert and CCI Coordinator in Seville. The session was moderated by Luis Fernández, editor of SIC magazine.
During the discussion, Penilla highlighted the need for regulatory compliance to translate into real security and resilience for organisations. In this regard, she pointed out that having documented policies and procedures is not enough if they are not applied in day-to-day operations, and emphasised the importance of staff training, conducting exercises and preparing for potential cyber incidents.
She also addressed the challenges posed by regulation for facilities using legacy technology, as well as the need for new requirements to take the specific characteristics of industrial environments into account. In relation to the Cyber Resilience Act (CRA), she highlighted the impact its implementation will have on companies developing industrial products and the importance of supporting their adaptation to the new regulatory framework.
The NIS2 Directive was another of the topics discussed. Penilla highlighted the uncertainty that the transposition process is generating among companies and stressed the need for greater clarity to enable them to move forward with their adaptation. From ZIUR’s perspective, the objective of regulation should go beyond documentary compliance and help companies become better prepared to prevent, respond to and recover from incidents.
Collaboration between ZIUR and CCI
ZIUR’s participation in the congress forms part of the collaboration agreement signed with CCI in January 2025, which aims to promote joint initiatives and foster knowledge sharing in the field of industrial cybersecurity.
Since the agreement was signed, the two organisations have collaborated on various initiatives, including training sessions for companies held at ZIUR’s facilities and ZIUR’s participation in various specialised events organised by CCI.
This collaboration strengthens ZIUR’s links with the national industrial cybersecurity ecosystem and helps bring companies the knowledge and tools they need to address the security and regulatory challenges facing OT environments.