Cybersecurity

The cybersecurity node of the BDIH includes 5 interconnected and distributed throughout the Basque Country laboratories. All these laboratories are members of the BCSC, which stands for "Basque Cybersecurity Centre", the Organization appointed by the Basque Government to promote cybersecurity in the Basque Country which mission is to promote and develop culture and awareness on cybersecurity in the Basque society, to streamline business activities concerning cybersecurity and to create a strong professional sector.

These laboratories are used to foster entrepreneurship and innovation, highlighting projects such as smart-grid, automation, blockchain, product testing and certification, etc.

Fields of Application

Identification of threats and risks Asset protection Attack detection Attack response Asset recovery

Identification of threats and risks

Identification of threats and risks

Develop an organisational understanding to manage cybersecurity risks to people, systems, assets, data and capabilities. Understanding business context, resources that support critical functions, and related cybersecurity risks enables an organisation to focus and prioritise its efforts in a manner consistent with its risk management strategy and business needs.

The following services are used for the identification of threats and risks:

Training in blockchain.
Cybersecurity training for connected and autonomous vehicles.
Cybersecurity functional test environment.
Industrial cybersecurity training for security operators and ethical hackers.
Cyber range training.
Test and demonstration environment for new security products.
Test and demonstration environment for new cyber range products.
Cybersecurity test environment and product and/or process demonstration in a controlled environment.
Practical training in cybersecurity.
Product certification.
Realistic simulation of complete industrial environments, including IT and OT segments for testing cyber-defence against complex attacks.
IT/OT test environment to test new network or processing equipment in a controlled, realistic and high-stress environment.
Test and demonstration environment in a context of IT/OT convergence to validate the operation of specialised components in industrial cybersecurity.
Multi-domain cyber range.
Big Data and cybersecurity.
Industrial network analysis IEC 62264.
Cybersecurity assessment of industrial components and systems.

Asset protection

Asset protection

Develop and implement appropriate security measures to ensure delivery of services. Asset protection includes the ability to limit or contain the impact of a potential cybersecurity incident.

The following services are used for asset protection:

Training in blockchain.
Testing and demonstration environment for the use of blockchain in improving business.
Test and demonstration environment for new products with blockchain.
Cybersecurity training for connected and autonomous vehicles.
Simulation of real communications between control centres and electrical substations for cyber-attacks.
Simulation of real communications between control centres and electrical substations for cyber-defence.
Cyber range training.
Test and demonstration environment for new security products.
Test and demonstration environment for new cyber range products.
Cybersecurity test environment and product and/or process demonstration in a controlled environment.
Practical training in cybersecurity.
Vulnerability and penetration testing.
Communications robustness testing.
Functional security testing.
Implementation testing.
Product certification.
PKI: Digital certificate management.
Realistic simulation of complete industrial environments, including IT and OT segments for testing cyber-defence against complex attacks.
Test and demonstration environment in a context of IT/OT convergence to validate the operation of specialised components in industrial cybersecurity.
Industrial cybersecurity training for security operators and ethical hackers in the context of IT/OT convergence of specific information systems.
Data analysis for cybersecurity.
Development of optimisation and Big Data applications robust to attacks.
Multi-domain cyber range.
Big Data and cybersecurity.
Industrial network analysis IEC 62264.
Cybersecurity assessment of industrial components and systems.

Attack detection

Attack detection

Develop and implement appropriate tools to determine the nature and extent of cyberattacks on an entity. Attack detection includes the timely discovery of cybersecurity incidents.

The following services are used for the detection of attacks:

Training in blockchain.
Testing and demonstration environment for the use of blockchain in improving business.
Test and demonstration environment for new products with blockchain.
Cybersecurity training for connected and autonomous vehicles.
Simulation of real communications between control centres and electrical substations for cyber-attacks.
Industrial cybersecurity training for security operators and ethical hackers.
Cyber range training.
Test and demonstration environment for new security products.
Test and demonstration environment for new cyber range products.
Cybersecurity test environment and product and/or process demonstration in a controlled environment.
Practical training in cybersecurity.
Vulnerability and penetration testing.
Communications robustness testing.
Functional security testing.
Implementation testing.
Product certification.
IT/OT test environment to test new network or processing equipment in a controlled, realistic and high-stress environment.
Industrial cybersecurity training for security operators and ethical hackers in the context of IT/OT convergence of specific information systems.
Data analysis for cybersecurity.
Multi-domain cyber range.
Big Data and cybersecurity.
Cybersecurity assessment of industrial components and systems.

Attack response

Attack response

Develop and implement appropriate measures to effectively mitigate identified cybersecurity incidents. Attack response supports the ability to contain the impact of a potential cybersecurity incident.

The following services are used for attack response:

Training in blockchain.
Simulation of real communications between control centres and electrical substations for cyber-defence.
Industrial cybersecurity training for security operators and ethical hackers.
Cyber range training.
Test and demonstration environment for new security products.
Test and demonstration environment for new cyber range products.
Cybersecurity test environment and product and/or process demonstration in a controlled environment.
Practical training in cybersecurity.
Test and demonstration environment in a context of IT/OT convergence to validate the operation of specialised components in industrial cybersecurity.
Industrial cybersecurity training for security operators and ethical. hackers in the context of IT/OT convergence of specific information systems.
Data analysis for cybersecurity.
Multi-domain cyber range.
Big Data and cybersecurity.

Asset recovery

Asset recovery

Develop and implement appropriate action plans to recover from a cyber-attack and restore the capabilities or services that have been affected by it. Asset recovery enables a timely recovery to normal operations, which reduces the impact of a cybersecurity incident.

The following services are used for asset recovery:

Training in blockchain.
Testing and demonstration environment for the use of blockchain in improving business.
Test and demonstration environment for new products with blockchain.
Cyber range training.
Test and demonstration environment for new security products.
Test and demonstration environment for new cyber range products.
Cybersecurity test environment and product and/or process demonstration in a controlled environment.
Practical training in cybersecurity.
Realistic simulation of complete industrial environments, including IT and OT segments for testing cyber-defence against complex attacks.
IT/OT test environment to test new network or processing equipment in a controlled, realistic and high-stress environment.
Multi-domain cyber range.
Industrial network analysis IEC 62.

Node in a nutshell

See Cybersecurity
node assets

Go Search assets 4.0 engine

Your 4.0 link person

IRATXE MARTIN
Basque Cybersecurity Centre (SPRI)
imartin@bcsc.eus
T. 945 236 636

Tell us your requirements

Help us to know you better. Answer a few questions and our 4.0 link
will give you the best solution for your requirements.

How would you define your situation regarding Industry 4.0?
- Advanced
- Intermediate
- Started
- Basic
Company name
What order of priority do you give to these needs?
Orden Necesidades

Order from 1 to 3, with 1 being your highest priority
Contact person*
Telephone
Email*
Activity sectors
Remarks
Hidden
Destinatario
CAPTCHA

Orden	Necesidades