Today, April 29, the executive director of the European Union Cybersecurity Agency (ENISA), Juhan Lepassar, has attended a meeting with the most relevant public and private actors in the field of cybersecurity in Spain.

During the meeting, -chaired by the Secretary General of Digital Administration, Jesús Torres- the director Lepassar was presented with the national cybersecurity model, based on the cooperation and collaboration of all parties under the umbrella of the Security System.

In the first place, the organizations that make up the Permanent Cybersecurity Commission —Ministry of Foreign Affairs, European Union and Cooperation, Department of National Security, National Cryptologic Center, National Cybersecurity Institute, Joint Cyberspace Command, Cybersecurity Coordination Office, Secretariat Secretary of State for Digital Administration, Secretary of State for Telecommunications and Digital Infrastructures and Secretary of State for Digitization and Artificial Intelligence—, have presented the functions, novelties and challenges in their respective fields of competence.

Next, the National Cybersecurity Forum has presented its functions, composition, main results obtained since its creation, and next actions to be carried out. In addition, the private sector has reported on the progress of the different Working Groups and the new actions initiated by mandate of the National Cybersecurity Council to help implement the National Cybersecurity Strategy.

For his part, the director of ENISA underlined, among other aspects, the importance of sharing information and intelligence at a European level, the necessary increase in investments in cybersecurity (where Spain is among the leading countries) and, lastly, the mobilization of EU funds to support European cybersecurity. On the other hand, he has very positively valued the initiative of the National Cybersecurity Forum, which is an example that can be extrapolated to other countries and the EU.

In this sense, the Cybersecurity Strategy of the Union promotes the construction of a solid cybersecurity for the EU, while promoting the need for public-private cooperation in the field of cybersecurity, as well as the importance of creating trust through through public-private associations, where ENISA plays a transcendental role.

National Cybersecurity Strategy

The National Cybersecurity Strategy, approved by the National Security Council in April 2019, underlines that public-private collaboration is a key element. In addition, it urges that this collaboration be carried out through the National Cybersecurity Forum, which aims to integrate representatives -among others- of civil society, independent experts, the private sector, the academic community, associations and non-profit organizations, to promote and create public-private synergies in this area.

In this sense, the composition of the Forum responds to the aim of having the greatest possible representation of public bodies and civil society. Under the presidency of the Department of National Security and the vice-presidencies of the National Cybersecurity Institute and the National Cryptologic Center, the Forum is made up of 16 organizations representing civil society —business sector, strategic study centers, universities or specialized media— , in addition to public bodies with competence in cybersecurity.

On February 21, 2020, the National Security Council approved the creation of the Forum as a working group of the National Cybersecurity Council, and its constitution took place on July 22, 2020.

ANEXO: COMPOSICIÓN

Presidencia

1. Departamento de Seguridad Nacional.

Vicepresidencias

1. Vicepresidencia Instituto Nacional de Ciberseguridad.
2. Vicepresidencia Centro Criptológico Nacional.

Vocalías

1. Representación de gran empresa: CEOE.
2. Representación de pyme: CEPYME.
3. Representación de autónomos: ATA.
4. Representación de usuarios: AUTELSI.
5. Representante de profesionales: ISACA.
6. Representante de Fundación: Fundación Empresa Seguridad y Sociedad (ESYS).
7. Representante de la Cámara de Comercio de España.
8. Representantes de asociaciones ligados a la ciberseguridad: ISMS Forum.
9. Representantes medios de comunicación: Editorial Borrmart.
10. Representantes medios de comunicación: Ediciones CODA.
11. Representación de Thinktanks: Real Instituto Elcano.
12. Representación de Thinktanks: Thiber.
13. Representante de universidades: Comisión Sectorial de Tecnologías de la Información y las Comunicaciones de la Crue Universidades Españolas.
14. Representante de universidades: Representante de la Red de Excelencia Nacional de Investigación en Ciberseguridad (RENIC).
15. Representante de CSIRTs: Coordinador Nacional de la Red CSIRT.es.
16. Representante intersectorial de la Mesa de Coordinación de Ciberseguridad de los Operadores de Servicios Esenciales.

Otros Representantes de la Administración

1. Ministerio de Asuntos Exteriores Unión Europea y Cooperación. Embajador en Misión Especial para las Amenazas Híbridas y la Ciberseguridad.
2. Ministerio de Defensa. Mando Conjunto del Ciberespacio.
3. Ministerio del Interior. Secretaría de Estado de Seguridad. Oficina de Coordinación de Ciberseguridad.
4. Ministerio de Asuntos Económicos y Transformación Digital
5. Secretaría de Estado de Telecomunicaciones e Infraestructura Digital.
6. Secretaría de Estado Digitalización e Inteligencia Artificial. Secretaría General de Administración Digital.