ZIUR presents the cybersecurity challenges facing Basque industry at 'CyberIndustry Congress 2025'
TECNALIA's international congress, held in Bilbao, brought together more than 300 industry experts on its first day
ZIUR, the Gipuzkoa Industrial Cybersecurity Center, visited Bilbao today, June 17, to participate in 'CyberIndustry Congress 2025'. María Penilla, the Foundation's general director, participated in a roundtable discussion with 320 professionals from 200 entities, including end-user companies, technology providers, research centers, universities, and institutional and sectoral stakeholders.
The congress featured local, national, and international speakers who provided global perspectives on the challenges and solutions in industrial cybersecurity, such as those related to supply chain protection, technological innovation, and the promotion of the Basque ecosystem. In turn, this first edition, organized by Tecnalia in collaboration with the Spri Group, has facilitated the connection of specialized technological offerings with the specific demands of strategic sectors of the Basque economy.
Cybersecurity has established itself as a key technology for the Basque Country due to the increasing digitalization and interconnection of its strategic sectors. The Basque technological fabric is strong, especially in key sectors such as industry, energy, healthcare, and now also the emerging aerospace industry. All of these require advanced cybersecurity solutions to ensure their competitiveness, integrity, and resilience.
The ZIUR expert participated in the roundtable "Regulatory Compliance: Impact and Preparation for the New European Regulatory Frameworks (CRA, NIS2, AI Act, and Data Act) in Basque Companies." During the debate, Penilla shared her perspective on the legal framework for cybersecurity with experts such as Carlos Nazabal, CEO of Certinalia, Andoni García Imaz, founder and lawyer at Seinale, Azucena Hernández, CEO of EuroCybcar, Salvador Trujillo, CEO of ORBIK, and Iñaki Pariente de Prada, Founding Partner at Dayntic Legal.
In this regard, the ZIUR expert stated that "the NIS2 Directive contributes significantly to the proper management of cybersecurity risks; a fundamental aspect, considering that in this area, risk is never zero." Regarding the CRA, she indicated that this law has changed companies' business models, "as it requires them to offer a security guarantee for five years from the date their product or service is marketed. Sometimes, it even forces them to modify a product's design, which increases the cost of the product or service by 15% or 20%."
The CyberIndustry Congress, in addition to the participation of the aforementioned entities, featured presentations by national and international professionals from organizations such as INCIBE, RENIC, CCI, Women4Cyber, and ECSO, as well as other key entities in the Basque ecosystem such as TECNALIA, the Department of Industry, Energy Transition, and Sustainability, the Basque Cybersecurity Agency Cyberzaintza, BAIC, BRTA, AFM, GAIA, and Cybasque, among others.
The event concluded with a specialized networking space, which aimed to foster effective collaboration between those facing current cybersecurity challenges and those who can solve them with advanced technologies. In this sense, it was the ideal showcase to showcase solutions and innovations at different stages of technological maturity, accelerate their adoption in industry, and make cybersecurity a key differentiating factor for the future of the Basque Country.