7. LISTING OF CYBERSECURITY COMPANIES AND SOLUTIONS€¦ · Directive (known as NIS Directive)...

WHITE PAPER ON CYBERSECURITY IN THE BASQUE COUNTRY

of 95

CONTENTS

1. PREFACE ....................................................................................................................... 3

2. GLOSSARY .................................................................................................................... 4

3. THE BASQUE CYBERSECURITY CENTRE ................................................................. 6

4. METHODOLOGY ............................................................................................................ 8

5. SECTOR ACTIVITY IN THE BASQUE COUNTRY ...................................................... 10

5.1 Sector data and statistics ....................................................................................... 10

5.1.1 Basque Country Players .................................................................................. 10

5.1.2 Threats to the Basque Country ........................................................................ 12

5.1.3 Cybersecurity in industrial environments.......................................................... 15

5.1.4 Cybercrime ....................................................................................................... 16

5.2 Cybersecurity Research in the Basque Country ..................................................... 18

5.3 Cybersecurity Innovation and Entrepreneurship in the Basque Country ................ 21

6. PROFESSIONAL PROSPECTS AND NEEDS ............................................................. 24

7. LISTING OF CYBERSECURITY COMPANIES AND SOLUTIONS ............................. 29

7.1 Market Players ........................................................................................................ 30

7.2 Description of the taxonomy ................................................................................... 31

7.3 Company listing ...................................................................................................... 35

7.3.1 Manufacturers .................................................................................................. 39

7.3.2 Wholesaler / Distributor .................................................................................... 47

7.3.3 Integrator / Consultant ..................................................................................... 50

7.3.4 Public Administration ....................................................................................... 80

7.3.5 University ......................................................................................................... 82

7.3.6 Vocational Training centres .............................................................................. 84

7.3.7 Basque Science, Technology and Innovation Network .................................... 86

7.3.8 Associations ..................................................................................................... 89

8. CONCLUSIONS ............................................................................................................ 93

9. BIBLIOGRAPHY ........................................................................................................... 95


of 95

1. PREFACE

Today the adoption of technology by society has posed a challenge for the public and

private sectors which had to get involved in current breakthroughs to meet the new society

and market demands, as new technologies are integrated in their development at an

increasingly faster rate.

New technology adoption has entailed not only the digital transformation of society, public

organisations and businesses, but also the emergence of new threats and risks.

In order to minimise the impact of new threats and risks on the EU, the European

Commission has launched a cybersecurity strategy aimed at promoting the European

values of freedom and democracy as well as safeguarding the safe growth of the digital

economy. To this end, the EU has recently passed the Network and Information Systems

Directive (known as NIS Directive) among other regulations and directives, to boost the

cyber-resilience of IT systems, reducing the impact of criminal activity on the internet while

strengthening the international EU cybersecurity and cyber defence policy.

Furthermore, the General Data Protection Regulation (EU) 2016/679 (hereinafter, GDPR)

passed on 27th April by the European Parliament provides a new legal framework

regarding data protection for the entire EU. The GDPR reinforces privacy principles and

regulates new rights for data subjects and new obligations for data controllers, all on the

basis of a new accountability and proactive responsibility principle which imposes high

diligence duty of care upon organisations involved in operations entailing personal data

processing.

Against this backdrop, the Basque Country, as an example of advanced modern society,

is heading towards a more cohesive, increased security and resilience social model.

Thus, thanks to the initiative led by the Basque Government, the Basque CyberSecurity

Centre (hereinafter, the BCSC or the Centre) was created under the organisational

structure of the Basque Business Development Agency or Association for Competitive

Transformation – Eraldaketa Lehiakorrerako Sozietatea S.A. (hereinafter, SPRI),

dependent on the Basque Government Department of Economic Development and

Infrastructures.

The purpose of this study is to provide an overview of the general Basque cybersecurity

Ecosystem scenario, showing an analysis of the cybersecurity sector, including key

factors such as prospects and opportunities for the sector, as well as describing in detail

the current situation of cybersecurity organisations operating in the Basque Country.


of 95

2. GLOSSARY

Includes the definition of some terms used in this document:

▪ Threat: Refers to any event leading to an incident that may cause material or non-

material damages to assets. Events may be of different types such as: natural, industrial, unintentional mistakes or intentional attacks.

▪ Big Data: Refers to the management and analysis of extremely large data sets

which cannot be processed using conventional data processing methods, as they

exceed the limits and capacities of the software tools usually employed in data

capture, management and processing.

▪ Cloud Computing: Refers to a type of computing that enables technology

providers to offer IT services via Internet. This enables software and other data to

be offered to clients upon request.

▪ Computer Security Incident Response Team (CSIRT): Refers to an

infrastructure made up of a team of experts responsible for developing preventive

and corrective measures to respond to security threats in IT systems.

▪ Firewall: Refers to a network security system designed to prevent unauthorised

access and allow authorised access. It consists of a device or a set of devices set

up to allow, limit, code or decode traffic among different areas based on a set of

rules and other criteria.

▪ National Cybersecurity Institute (INCIBE): The Spanish National Cybersecurity Institute reports to the Spanish Ministry of Economy and Business (MINECO)

through the Secretary of State for Digital Advancement (SEAD). It refers to a benchmarking institution nationwide for the development of cybersecurity and

digital trust for citizens, the Spanish Academic and Research Network (Red Iris)

and businesses, and particularly for strategic sectors.

▪ Industry 4.0: refers to the introduction of digital technology in manufacturing and

industrial environments. This means the digital transformation is applied to the production process.

▪ Malware: Refers to malicious software designed for multiple purposes including

the extraction of personal data and passwords, stealing funds or preventing users

from accessing their own device or information, etc.

▪ Open-source: Refers to software distributed under a type of software licence

which allows the source code to be freely used for analysis, modification and

improvement, and even shared by the end user, provided he/she has the

necessary knowledge,

▪ Security Policies: Refers to internal policies implementing technical and

organisational measures necessary to ensure secured information technologies

(computing devices, information systems, networks, etc.) and security for those

interacting and using the services associated with them.


of 95

▪ Ransomware: Refers to a type of malicious software that infects equipment and

enables cybercriminals to lock a device from a remote location and encrypts the

files, preventing the control of stored information and data. Malware launches a

pop-up window demanding ransom payment, usually in a virtual currency (such as

bitcoins).

▪ General Data Protection Regulation (GDPR): Regulation (EU) 2016/679 of the

European Parliament and the Council of 27th April 2016, for the protection of

natural persons in the scope of the processing of their personal data and free

movement of such data within the EU, which replaces the Data Protection Directive

95/46/EC.

▪ Spam: Refers to irrelevant, unsolicited messages or messages sent from unknown

senders (spam), typically for advertising purposes and generally sent to a large

number of users (even massive) causing damage to the recipient in some or

several ways.

▪ Spyware: Refers to software that gathers data from a computer to then forward

them to a third party without the consent or knowledge of the data subject.

▪ ICT: Information and Communication Technology

▪ Trojan: A Trojan or Trojan horse refers to a type of malware disguised as legitimate and inoffensive software but when executed provides hackers or cyber-criminals

with remote access to the infected device.

▪ Virus: Refers to a malicious software program or piece of code uploaded to your

computer without your knowledge or permission. Some viruses are just

bothersome but most of them are destructive and designed to infect and take control of vulnerable systems.

▪ Vulnerability: Refers to any weakness which can be exploited by a threat, such as

an attacker, or to the weaknesses of assets or their protection measures which

facilitate the success of a potential threat.


of 95

3. THE BASQUE CYBERSECURITY CENTRE

The Basque cybersecurity Centre (BCSC) is the leading organisation in the field of

cybersecurity for Basque citizens, businesses and public bodies. One of its main aims is

to encourage the adoption of cybersecurity measures in industry particularly in strategic

sectors of the Basque economy. This intends to increase the maturity level of these

sectors; therefore protecting them against cyber threats and providing them with a

competitive advantage.

Moreover, with the adoption of the aforementioned measures, the BCSC aims to turn the

Basque Country into an international model for the application of cybersecurity

technologies in industry, and be acknowledged as a meeting point for local cybersecurity

suppliers and demanders, as well as leading public-private partnership initiatives at local

and inter-regional levels.

Furthermore, the BCSC has become the leading public Computer Security Incident

Response Team (CSIRT) regarding any incident affecting Basque society and is

connected to several public and private CSIRT networks around the world: the BCSC is

a member of CSIRT.es and of the Forum of Incident Response and Security Teams global

forum (FIRST), which is the largest global forum for Computer in Security Incident

Response Team Centres.

The BCSC is an across-the-board initiative which has involved four Basque Government

departments since it was established: the aforementioned Economic and Infrastructure

Development, as well as the Security, Public Governance and Self-Government and

Education departments; in addition to four organisations in the Basque Science,

Technology and Innovation Network, such as: Tecnalia, IK4-Ikerlan, Vicomtech and the

Basque Centre for Applied Mathematics. Its activities include research projects,

entrepreneurial initiatives and co-ordinated collaboration with other relevant players at

Spanish and international levels.

In this context, it is worth highlighting the role played by the BCSC as the representative

of the Regions in the Partnership Board of the European cybersecurity Organisation

(ECSO) (https://www.ecs-org.eu), as well as being a member of the Ecosystems

Partnership in Innovation and Cybersecurity, also known as Global EPIC

(https://globalepic.org).

Figure 1. BCSC Headquarters

https://www.ecs-org.eu/

https://globalepic.org/


of 95

Under the umbrella of SPRI, the BCSC values are as follows:

▪ Objectivity

▪ Efficacy, efficiency and social profitability

▪ Full commitment, good faith and exemplary

▪ Austerity and honesty

▪ Transparency, accessibility and confidentiality

▪ Ethics, responsibility and collaboration


of 95

4. METHODOLOGY

THE WHITE PAPER ON CYBERSECURITY IN THE BASQUE COUNTRY covers all

cybersecurity market players as well as their offer of products and services. This is the

first issue of the paper which aims to become an overview or snapshot of the Basque

cybersecurity market as of December 2018. As a living document, it will be subject to

periodical revisions and updates as appropriate from time to time. Furthermore it is in

constant evolution due to the increasing advance in the digitalisation of services and

opportunities derived from them.

The scope of this study has taken into account the different players offering cybersecurity

services and solutions such as; companies, technology centres, universities, vocational

training centres, relevant public bodies, clusters, associations, business accelerators and

incubators whose collaboration and business support has been essential in the data

validation process as well as at different points of the different study sections.

The process, undertaken by the different players for the preparation of the current image

of the cybersecurity services offered in the Basque Country, was carried out in four major

steps:

Figure 2. Methodology applied

1. Initial identification: First, a search of all those companies or any other player

incorporated in the Basque Country or not, with a permanent office in any of the

three Historical Basque Territories of the Autonomous Community of the Basque

Country, whose services either partly or wholly cover the field of cybersecurity. The

only exception to the above rule were some non-profit-making professional

associations with no specific premises in the Basque Country, but maintaining their

presence and local activity through their associates.


of 95

2. Interaction and dialogue: During the preparation of the current image of the

cybersecurity products and services offered in the Basque Country a dynamic

interaction has been maintained with selected businesses and players, to present

the information for publication, as well as providing any feedback and amendments.

3. Meetings: In addition, meetings were held with some selected businesses and

players where there was more uncertainty, in order to co-ordinate and process

information.

4. Publication: Finally, the current scenario of the cybersecurity services offer has

been published through BCSC and SPRI communication channels and shared with

the applicants as well as interested personnel. All information reported in the

study was provided by each of the listed organisations or players.

This resulted in the implementation of a work methodology which as explained in section

“7.2 Taxonomy Description” of this document explains, will translate into a taxonomy adjusted to the cybersecurity market evolution.

As already mentioned, all information included in this study is based on the data provided

by the identified listed stakeholders. The Basque Cybersecurity Centre cannot guarantee

100% of the active players established in Basque Country were reached. In the event of

an organisation not being represented, an application requesting inclusion in further

issues can be submitted to: [email protected]

mailto:[email protected]


of 95

5. SECTOR ACTIVITY IN THE BASQUE COUNTRY

The manufacturing sector is facing an irreversible fact: the growing digitalisation of

industrial production systems, with Internet as a driver and evolving into cyber-physical

systems. This new industry and its strategy are known as Basque Industry 4.01 in the

Basque Country.

The Basque industrial network boasts a great capacity for integrating different

technologies associated with manufacturing activity such as process automation or

optimisation. The technological knowledge accumulated in the Basque Country

encompasses from the more conventional metal-mechanical processes to advanced ICT

methods, and access to the technology necessary to complete transfer to Industry 4.0 can

be considered guaranteed in the region.

Therefore, new smart manufacturing processes capable of adapting better to the needs

and production processes, as well as a more effective allocation of resources, are required.

In such processes, it is important to introduce cybersecurity from the design phase of

products and services on offer. Likewise, adapting cost models to persuade users to

consider cybersecurity a value rather than a cost is also important, highlighting that there

is also “a cost associated with failing to apply protection measures”. Awareness, education and training are essential to ensure an appropriate level of protection.

The Basque cybersecurity sector is made up of private companies and public

organisations specialised in offering cybersecurity services and solutions, supplemented

by the Basque Network Science, Technology and Innovation and the Education Network.

Altogether their strategic aims include addressing cybersecurity threats affecting

companies and protecting Basque citizens’ rights. On the date of this study, different associations related to the sector have been identified; however no group of interest

concentrates the private sphere strategy, representing the interests and serving as a

single channel to develop a well-designed regional sector.

The establishment of a centre specialised in cybersecurity such as the BCSC, embodies

the Basque Government’s commitment to Basque companies and citizens, generating an opportunity to showcase the capacities of companies, startups and research bodies in the

Basque Country correspond to those of a cutting-edge ecosystem.

5.1 Sector data and statistics

5.1.1 Basque Country Players

The Basque cybersecurity is a heterogeneous sector, with co-existing players of

different sizes, from large multinationals to small and medium enterprises.

1 Source: IndusSec 2018: “Ciberseguridad para la Industria” (cybersecurity for Industry) Available at: http://www.spri.eus/es/basque-industry-comunicacion/indussec-2018-ciberseguridad-la-industria/

http://www.spri.eus/es/basque-industry-comunicacion/indussec-2018-ciberseguridad-la-industria/


of 95

As to geographical distribution, Bizkaia is the territory with the most cybersecurity players

based in the Basque Country, in fact 48% of them. The following chart shows distribution

per Historical Territory:

Figure 3. Distribution of cybersecurity retailers (Basque Historical Territories). Source BCSC

The following chart illustrates the distribution of cybersecurity retailers in the metropolitan

areas of the capitals of the three Historical territories

Figure 4. Distribution of cybersecurity retailers (Capitals). Source BCSC

Bilbao metropolitan area concentrates the highest density of cybersecurity suppliers,

housing 40% of the total number in the Basque Country. This is because retailers tend to

be in major cities where most of the large companies, prospective clients and international

communication nodes are located.

22%

48%

30%Araba

Bizkaia

Gipuzkoa

Cybersecurity retailers

Bilbao40%

Donostia-San Sebastián

24%

Vitoria-Gasteiz

22%

Other14%

Bilbao

Donostia-San Sebastián

Vitoria-Gasteiz

Other

Cybersecurity

retailers


of 95

5.1.2 Threats to the Basque Country

According to information from the Spanish National Cybersecurity Institute (INCIBE),

Basque companies are in fifth position in terms of volume of compromised resources 2

detected to date, in comparison with other Autonomous Communities. In particular, 3,095

average resources were compromised from January to October 2018, representing

slightly over 4% of the total figure in Spain.

Figure 5. Distribution of compromised resources per Autonomous Community INCIBE

Regarding the distribution of compromised resources per Basque Historical Territory,

Bizkaia concentrates the highest compromised resources amounting to 58.22% on

average with an absolute average daily value of 1,764 from January to October 2018.

Regarding the distribution of compromised resources per municipality as part of the

Basque Country Autonomous Community the capitals are in the first three places and

Bilbao tops the list as the capital with more compromised resources (50.03% on average),

followed by Vitoria-Gasteiz and Donostia-San Sebastián.

2 Any device, system, service, network of technological assets in general, affected by a security problem

0.00%

5.00%

10.00%

15.00%

20.00%

25.00%


of 95

Figure 6. Distribution of compromised resources INCIBE

Likewise, according to the information provided by INCIBE regarding the most frequent

type of incident in the Basque Country, the majority are caused by the networks of

infected computers controlled by internet users (called botnets) which are normally used

for mass spam or email delivery with malicious attachments or to carry out any other type

of attack or fraud.

Furthermore, other frequent attacks are related to phishing, impersonation for information

theft or interruption of operations on Internet. The least frequent are directed attacks,

given the level of sophistication, they are also the most dangerous. According to different

studies, the average time span from the attack until the attack detection is about nine

months and 43% of the cyber-attacks affect SMEs3.

3 Source: Noticias de Gipuzkoa. Available at: www.noticiasdegipuzkoa.eus/2018/01/11/sociedad/analizaran-el-riesgo-de-que-las-empresas-vascas-sufran-ci ataques

Capital Resources allocated

Bilbao 1,548

Gasteiz 402

Donostia 186

Bizkaia

1,764 a day

Araba

415 a day

Gipuzkoa

916 a day


of 95

To address this situation, a large number of small and medium enterprises in the Basque

Country have implemented some type of security software. Some of the most frequently

used systems include: antimalware, firewall, antispyware and antispam. According to this

study4 carried out by the BCSC and Industrial Cybersecurity Centre (ICC), four out of five

Basque industrial companies among the 90 companies surveyed intends to launch new

Industrial Cybersecurity initiatives during 2019; in 85% of cases this will also entail

increasing the budget assigned to this matter, and a progressive rise in the general

maturity level is also expected. The same survey reflects how risks in automation and

control systems are being managed by the IT area, implying a partial yet mainly

technological approach.

The most frequent threats for SMEs in Spain (virus, spyware, data theft, hackers,

impersonation, botnets, spam) and how they are propagated are shown below5.

Figure 7. Frequent threats and means of propagation. Sophos, National Security Study of SMEs.

Despite the security measures used, 61% of Basque companies are estimated to have

suffered some type of IT security incident, which derived in financial losses for most of

them. From a financial point of view, according to data provided by INCIBE and

extrapolating the Basque GDP volume from the Spanish total, the loss caused to Basque

companies by cyber-attacks in 2017 is estimated to amount to €840 million.

4 Source: Study carried out by the BCSC and the CCI on Industrial Cybersecurity https://www.basquecybersecurity.eus/es/actualidad-bcsc/empresas-industriales-vascas-aumentaran-recursos-49.html 5 Source: Sophos. “Estudio Nacional de seguridad de pymes” (National Security Study of SMEs)

The preferred means of entry for these

threats are web browsing, email and

downloads.

Virus

Spyware Data de

Theft

Hackers

Zombies / Bots

Impersonation

Spam


of 95

5.1.3 Cybersecurity in industrial environments

The following figure represents the criticality of the vulnerabilities identified in 2017

affecting industrial control systems, after filtering low criticality cases.

Figure 8. Incident classification INCIBE

Data show that industrial environments are also vulnerable; therefore, their protection needs

to be reinforced, as the vulnerabilities identified may result in major disruptions for companies

with serious consequences for their production processes6, and with the following most

frequent impact:

▪ Financial losses

▪ Information theft

▪ Information destruction

▪ Loss of prestige and reputation

▪ Impersonation

The protection of infrastructures acquires special importance in those affected by the Law

8/20117, i.e., those classified as Critical Infrastructures or Essential Services.

6 Source: “Seguridad Industrial 2017 en cifras” (Industrial Security in figures in 2017) – INCIBE https://www.incibe-cert.es/blog/seguridad-industrial-2017-cifras 7 Law 8/2011 https://www.boe.es/buscar/act.php?id=BOE-A-2011-7630

30

48

22

Criticality of ICS

vulnerabilities

Critical High Medium


of 95

5.1.4 Cybercrime

In 2017, over 594 million people were victims of online crimes worldwide. Over 300 million

online identity theft offences were committed on websites, social networks and email

services and 430 million viruses and malware were detected.8

In 2017, the Basque Police IT Crime Department dealt with 9,217 claims. Furthermore,

according to data provided by the Ministry of the Interior in 2017, 392 incidents known as

cyber-crime penal offences occurred in the Basque Country; i.e. 103 more than the

previous year, meaning a growth of 35.64%. Bizkaia is the Historical Territory with the

most cases, 186 to be precise, followed by Gipuzkoa with 146 and Araba with 60. The

following chart illustrates the distribution of cases per Territory as a percentage:

Figure 9. Cyber-crime events in 2017 per territory Source: Ministry of the Interior

Out of all cases, 317 (around 81%) were IT frauds, where credit card, debit card and

travellers’ cheque frauds were the most frequent and becoming increasingly common. After fraud, sex crimes are the second most recurring crime, with 30 cases in 2017; and

illicit access and interception in third place as shown in the following figure9:

8 Source: Symantec 9 Source: Cybercrime Statistics portal Ministry of the Interior Available at: https://estadisticasdecriminalidad.ses.mir.es/

47,45% 15,31%

37,24%

Cyber-crime

Events

2017

Bizkaia

Araba

Gipuzkoa

https://estadisticasdecriminalidad.ses.mir.es/


of 95

Figure 10. Most common cyber-offences 2017 Source: Ministry of the Interior

The data shown relate to known criminal offence events connected to cybercrime

classified per territory, criminal group and period10.

2017 2016 2015

Araba

Illicit access ad interception 3 0 2

Threats and duress 3 6 2

Honour crimes 2 1 1

Crimes against industrial/intellectual property 0 0 1

Sex offences 3 5 4

IT Impersonation fraud 1 3 2

IT fraud 45 36 27

Data and system interference 3 2 1

Gipuzkoa



Honour crimes 2 2 2


Sex offences 9 9 13


IT fraud 122 89 72


10 Source: Cybercrime Statistics portal Available at: https://estadisticasdecriminalidad.ses.mir.es/

Most common offences 2017

Illicit access and interception Revelation of Secrets and/or leaks

IT fraud Bank and other types of fraud

Sex offences Child pornography

https://estadisticasdecriminalidad.ses.mir.es/


of 95

2017 2016 2015

Bizkaia



Honour crimes 2 2 1


Sex offences 18 15 13


IT fraud 150 81 64


Table 1. Cybercrime data per territory Source: Ministry of the Interior

These are just some of the incidents occurred during the year, as a significant number of

them may not have been detected or reported by the victims.

5.2 Cybersecurity Research in the Basque Country

The Basque Country is also at the forefront in the high number of researchers operating

in the business sector. According to the latest “Altran Innovation Index” report available, the Basque Country boasts a level of 61%, highly above the Spanish average and closer

to that of European countries with the highest innovation capacity.11

11 Source: Altran Innovation Index 2016

0

0.1

0.2

0.3

0.4

0.5

0.6

0.7

0.8

0.9

1

Altra

n I

ndex 2

016

Innovation Capacity Altran

Group:

[ ] 1. Low capacity

[ ] 2. Medium capacity

[ ] 3. High capacity

[ ] Basque Country

Figure 11. Innovation Capacity Index Altran Group


of 95

Cybersecurity research areas currently focus on:

▪ The development of Privacy, Biometric Authentication and Identification,

▪ BlockChain and Data Integrity Innovation,

▪ Innovation in cryptography and prediction, trend and detection algorithms,

▪ Artificial Intelligence development and innovation,

▪ Innovation and development of Deepweb, Darknet, DDoS, APT, Anti-Ransomware,

Malware, etc.

The most outstanding organisations in the Basque research community have 154

researchers distributed along the three Historical Territories. As the following image

shows: 9 researchers in Araba, 111 in Bizkaia and 34 in Gipuzkoa.

There are three types of researcher profiles in the Basque community, currently taking

part in 125 cybersecurity research projects; 72 nationwide projects and 51 European

projects.

Figure 13. Basque research community Source BCSC

111

9

3Bizkaia

Gipuzkoa

Araba

Senior researchers PhD

Junior researchers PhD students

Administrative Officials Support staff

117

33

4

Figure 12. Distribution of cybersecurity researchers per Historical Territory Source BCSC


of 95

The Basque Science, Technology and Innovation Network research community

(excluding companies) has obtained 4 cybersecurity patents and published 200 papers in

the last 5 years. The following image shows the number of publications per area of

specialisation during this period:

Xº Publications

Warranty, audit and certification 13

Cryptology 11

Data security and privacy 28

Education and training 5

Management of operative events and digital-forensic analysis 5

Security management and governance 11

Distributed networks and systems 89

SW and HW security engineering 40

Security measures 2

Technology and legal matters 2

Theoretical principles for security analysis and design 3

Table 2. Publications per area in the last 5 years 12

12 Source: data provided by the Basque research community


of 95

5.3 Cybersecurity Innovation and Entrepreneurship in the Basque Country

The Basque Country has made a significant improvement in terms of capacity to innovate

to become one of the major industrial hubs in Europe, thanks to its sound industrial

network, numerous technological organisations and programmes aimed at fostering and

promoting innovation.

In the Basque Country several support programmes and aid schemes are in place to drive

entrepreneurship and innovation in Basque companies. The Ekintzaile programme offers

support by accompanying and funding new innovative industrial business projects. The

SPRI Group offers the necessary tools to help internationalisation, funding, finding

industrial land, implementing new technologies or undertaking the penetration process in

the New Industry.

Furthermore, the portal UP!Euskadi is offered as part of the Basque Entrepreneurial Inter-

institutional Plan. To centralise all the necessary information on processes, programmes,

services, financial instruments, etc. In the Basque Country it is also worth mentioning the

role of the Business Innovation Centres (BICs),

https://upeuskadi.spri.eus/es/aceleradoras-de-startups/) for incubation and acceleration

of startups, and to accompany business growth, consolidation and projection processes.

Another noteworthy initiative of the Basque Government and the SPRI Group aimed at

driving the development of the best startups with solutions based on new Industry 4.0

technologies is BIND 4.0. In 2018, over five hundred startups took part in this initiative,

76% of which were international, with the most outstanding applicants from

technologically leading hubs worldwide such as the USA, Israel, the UK and Germany.13

Business activity in the Basque Country made significant progress during 2017-2018

according to the Global Entrepreneurship Monitor (GEM). In particular activity went from

3.5% to 5.8% in one year. Likewise, seed capital increased to €23,500, which is higher than the average figure in Spain (€15,000) or for the previous year (€15,000).

It is worth highlighting the international vocation of 25.2% of Basque entrepreneurial

population in 2017, which is above over half the Spanish autonomous communities.14

Evidence of this are the multiple cybersecurity startups established in the Basque Country,

including the following ones which have submitted completed specific information

datasheets within the deadline for this study:

13 Source: SPRI. Available at: https://www.spri.eus/es/upeuskadi-comunicacion/mas-de-medio-millar-de-startup-de-todo-el-mundo-optan-a-poder-participar-en-la-3a-edicion-del-programa-vasco-de-aceleracion-bind-4-0/ 14 Source: Global Entrepreneurship Monitor. Available at: https://gem-paisvasco.es/wp-content/uploads/2018/06/GEM_CAPV_2017-18.pdf

https://upeuskadi.spri.eus/es/aceleradoras-de-startups/

https://www.spri.eus/es/upeuskadi-comunicacion/mas-de-medio-millar-de-startup-de-todo-el-mundo-optan-a-poder-participar-en-la-3a-edicion-del-programa-vasco-de-aceleracion-bind-4-0/



https://gem-paisvasco.es/wp-content/uploads/2018/06/GEM_CAPV_2017-18.pdf

https://gem-paisvasco.es/wp-content/uploads/2018/06/GEM_CAPV_2017-18.pdf


of 95

▪ Alias Robotics

▪ Countercraft

▪ Cras Vigilans Group

▪ Gaptain (elasTIC Innovation Hub S.L.)

▪ Encriptia

▪ EnigMedia

▪ Globe Testing

▪ Hdiv

▪ Ironchip Telco

▪ Jakin Code

▪ Keynetic Technologies

▪ P3rseus

▪ Redborder

▪ RKL Integral

▪ Sealpath

▪ Relyum

▪ Titanium Industrial Security

▪ Zuratrust

Altogether there are 18 startups: 8 supply cybersecurity services while the other 10

manufacture their own technology.

Three more startups can be added to the foregoing list on the date this study was

published: Ensotest was established in Araba as a cybersecurity startup and was a

finalist of the Demo Day organised by INCIBE on 21st February 2018, although it is

currently directing its offer towards other fields; Osane and EuroCybcar were also being

set up as new cybersecurity startups in Araba at the end of 2018; and thirdly, CyberTIX

is expected to be incorporated in Gipuzkoa during the first half of 2019. That is, the Basque

cybersecurity entrepreneurship is in good health and continues to produce ideas which

will be turned into new companies.

During the first months of 2019, the figures for Bizkaia, Araba and Gipuzkoa are expected

to be 8, 7 and 6, respectively. This represents a startup density of 21 (excluding Ensotest

in Araba) and positions the Basque Country as one of the hottest hubs for cybersecurity

entrepreneurship and innovation in Southern Europe. It is worth highlighting the number

of cybersecurity companies established in Araba's Historical Territory, if we take into

account its population volume is smaller in relation to Biscay and Gipuzkoa.

8

7*

6* Bizkaia

Gipuzkoa

Araba


of 95

Figure 14. (*) Basque startups per Historical Territory considering emerging companies. Source BCSC

Regarding the type of startups, it is worth highlighting a significant proportion of

Manufacturing companies with their own technology:

Figure 15. Basque startups per type of activity Source BCSC

Cybersecurity

startups

56% 44%

Manufacturers

Service providers


of 95

6. PROFESSIONAL PROSPECTS AND NEEDS

The technological evolution has generated the need to provide secured protected

networks, infrastructures and data for users, public bodies and companies, generating

new business opportunities in the field of cybersecurity. The following markets are among

those expected to grow:

Figure 16. Markets with opportunities for operation. Source: Incibe

This increasing demand in products and services to improve ICT infrastructure protection

has also boosted the growth of the cybersecurity sector. Thus, at global level, the

cybersecurity sector is now a booming economic activity with a global turnover of €62,540 million in 2015 and an expected demand of €79,300 million in 2018.15 This growth is the

result of the technological advance and current digitalisation process in most sectors.

15 Source: PwC. The Global State of information security survey 2017

Industrial Internet of Things (IoT), Industry 4.0,

SCADA/ICS Systems

Smart vehicles, Aviation, RPAS, drones,

Wireless communications

Online banking, New payment methods, Big Data

Connected medical terminals, Information

Protection, Secure Storage

IoT growth, Secure Storage, Cloud Computing

Industry

Medicine

Mobility

Economy

ICT


of 95

From a sector viewpoint, the main trends in terms of cybersecurity are shown as follows:

19 differentiated trends can be identified in 6 sectors of activity.16

From the viewpoint of the technological paradigm evolution, the main trends gaining

momentum and which will therefore determine how we offer protection as well as

protecting ourselves are the following:

▪ Cloud technology is becoming widespread and is no longer an option. Companies

are using the cloud more than ever to store all or part of their technological and security infrastructures. Most companies admit to having platforms supporting their

IT functions, part of their operations and services offered to clients, as well as

marketing, sales and financial functions in the cloud.

▪ Data Analytics is a powerful tool for threat anticipation. To anticipate in detecting

threads and attacks, advanced real-time data analysis systems are gaining weight among the companies.

▪ The detection of abnormal behaviour patterns (sensors) and the adoption of accepted behaviour policies (enforcement), are also boosted by the application of

Artificial Intelligence algorithms.

▪ Advanced Authentication Systems. Companies in all sectors are favouring the

use of advanced technologies not only to make processes more user-friendly but

also more secured.

16 Source: INCIBE cybersecurity trends:

1.- Industrial and Environment

sector

2.- Mobility sector

3.- Services sector

4.- Citizens sector

5.- Public Administration

Sector 6.- ICT sector

Cybersecurity in Industrial Control

Systems

Protection of smart vehicles

Big Data Analytics

Protection of connected

medical terminals

Cyber intelligence distribution

Cloud security services

Cyber-resilient systems for critical

infrastructures

Protection of satellite

communication systems

Information management

Encryption for research

Simulation of incidents and

cyber exercises

Real-time encoding

Protection of industrial and

energy networks

Security for Finites

services

Secured location and transfer of

medical data

Homomorphic

encryption

Education and

technology

Ethical hacking

Trust digital certificate

Table 3. cybersecurity trends: INCIBE


of 95

▪ Open-source software is also becoming mainstream. The adoption of open-source

software is one of the major changes introduced in the IT areas of companies.

▪ General Data Protection Regulation (GDPR). Businesses must get ready to

comply with the GDPR as this is a major change. However, this could turn into a differentiation factor. This is an opportunity to improve the security level of

information in organisations.

From an organisational viewpoint, a series of tactical priorities are being implemented

in the business world. The first priority is to determine the degree of effective integration

of security in the organisation as a whole. The second priority is to make the most of

already existing professional competences. The third priority consists of going beyond the

usual recruitment strategies in organisations and ensuring that new companies

understand the basic competences in terms of cybersecurity.

In the near future the demand for cybersecurity-related jobs not covered will continue to

exist and only a combination of investment, innovation, political will and cultural change

can alleviate the situation.

According to 2016/17 statistics, only 20.35% of the total number of 8,899 Basque

graduates obtained a degree in Engineering. The number of Engineering degrees

amounted to 14.41% (261 graduates) and can be broken down into 165 and 96 for IT and

Telecommunications, respectively.

The following image shows the volume of students who completed their studies in one of

the Basque Territories, broken down by qualification.

Figure 17. Graduates in 2016/17 in the Basque Country Source: Eustat

Compared to 2016, in 2018 there was a strong demand peak in the labour market for IT

and industrial engineering qualifications. The current demand of 5,200 engineers includes

IT engineering degrees, i.e. almost 38% higher than that registered in 2016.

Gipuzkoa

Total Engineering

20.35%

Total

engineers:

1.811

2.93%

Total IT and

Telecom: 261

8,899

University graduates

in 2016/17 in the

Basque Country

Araba

Bizkaia

10

63

92

165

0

68

28

96

IT Engineering Telecommunications

Engineering


of 95

Figure 18. Expected labour contracts in 2018 and 2016 in the Basque Country Source: Confebask

17.90%

3.20%

2.60%

2.60%

5.30%

18.40%

5.80%

21.60%

22.60%

10.80%

2.00%

2.20%

2.30%

8.10%

13.70%

16.10%

17.40%

27.30%

0.00% 5.00% 10.00% 15.00% 20.00% 25.00% 30.00%

Other academic disciplines

Chemical Science

Biology/environmental science

Law

Economy

Business administration and management andmarketing

IT studies

Other engineering

Industrial Engineering

Expected employment distribution in 2018 and 2016 per academic discipline

2018 2016

1354

239

100

199

398

1394

438

1633

1712

927

171

189

198

693

1169

1385

1484

2339

0 500 1000 1500 2000 2500

Other academic disciplines

Chemical Science

Biology/environmental science

Law

Economy

Business administration and management andmarketing

IT studies

Other engineering

Industrial Engineering

Number of new labour contracts expected in 2018 and 2016 per academic discipline

2018 2016

2018: 60.9%

2016: 50.0%

2018: 5,208

2016: 3,783


of 95

Regarding vocational training: 2,503 students were enrolled in vocational IT studies in the

academic year 2015-2016; 841 of them at intermediate and 1,662 at higher qualification

level. In the academic year 2016-2017, 2,594 were enrolled in vocational IT studies, 872

of them at intermediate and 1,722 at higher qualification level. As we can see, the number

of IT students in Basque vocational training centres has experienced a growth of 1.04%

in relation to the previous academic year.

Figure 19. Vocational qualifications in the Basque Country Source: Eustat

In the EU 28 (including the UK since Brexit has not yet materialised), as a whole complex

evolution is projected as the categories where the highest increase in jobs is registered

correspond to Direction and Management on the one hand, and Technicians and Support

Personnel, on the other.

In this context, the global advanced manufacturing market is expected to undergo

significant growth and to experience an increase in highly qualified jobs with a particular

impact on the demand for engineering. Regarding competences, the introduction of new

technologies and growing process automation will result in a rise in the demand for

technical competences in all jobs.

Intermediate Higher

Year 2015/16 Year 2016/17

Vocational training


of 95

7. LISTING OF CYBERSECURITY COMPANIES AND SOLUTIONS

This listing includes all organisations, created in the Basque Country or not, but with a

permanence office in one of the 3 historical territories and offering services totally or

partially related to the field of cybersecurity.

This paper summarises the offer of cybersecurity capabilities in the Basque Country,

distributed according to taxonomies applied as follows:

TYPE OF

PLAYER TOTAL

TYPE OF

SOLUTION TOTAL

Manufacturer 16

Product 16

Wholesaler / Distributor

5

Service 91

Integrator / Consultant

61

Public Administration

3

Universities 4

Vocational Training centres

4

Basque Science, Technology and Innovation Network

7

Associations 7

Total players 107

Table 4. Type of player and solution


of 95

7.1 Market Players

The different market players operating in the supply chain not only to deliver products to

users but also to offer services have been identified in this paper. As previously mentioned,

the supply chain is made up of Manufacturers, Wholesalers / Distributors and Integrators

/ Consultants.

Figure 20. Market Players

Companies dedicated to the design, development and

commercialisation of hardware or software products. The

commercialisation of these products is often supported by

Wholesalers and Distributors. Other manufacturers

directly operate through web platforms. Manufacturers

01

Wholesalers are companies offering a selection of

products made by manufacturers. Offering the best

solution for each user.

Distributors may sale directly to other companies or end

users.

Wholesalers

/Distributors

02

Integrators offer a range of services, from installation to

commissioning and further services. Consultants are companies dedicated to provide support,

consultancy services and business advice. Integrators /

Consultants

03

Others refer to Universities, Vocational Training Centre,

Technological Centres, Associations and Clusters, Public

Administrations and other proactive agents. Others

04


of 95

7.2 Description of the taxonomy

The proposed cybersecurity taxonomy describes several levels according to the different

products and services.

This classification describes in detail the services and products currently on offer on the

cybersecurity market. Thus, the scope of the products and services helps to identify the

main areas applicable to them.

On the other hand, the taxonomy also facilitates the identification of those who are the

target of solutions and products.

These scopes enable easy searching and classification, as in addition to using categories,

also enable searching according to the area or scope of application.

The scopes of application for these solutions are as follows:

▪ Startup

Companies seeking to start up, establish or launch a new business based on new

business ideas which are just budding, under construction or about to go into mass

production.

▪ Micro-company

Companies with less than 10 employees or freelancers in many cases.

▪ SME

Small and Medium Enterprises with 10 and 250 employees and medium size

business volume.

▪ Large enterprise

Companies with more than 250 employees, with their own infrastructure and high

business volume.


of 95

The final taxonomy model is the result of the foregoing details. On the one hand, elements

included in the cybersecurity category and their scopes of application are shown:

SCOPE OF APPLICATION

PRODUCT CATEGORY Access and

identity management

Security at the

workplace

Data and application

security

System security

Network security

Anti-fraud

Anti-malware

Technical Audit

Standard accreditation

Contingency and

continuity

Access control and authentication

Legal compliance

Security intelligence

Information leak prevention

Communication protection

Mobile device security

Table 5. Product Taxonomy Model


of 95

A brief description of each item shown above is included below:

▪ Anti-fraud: Solutions aimed at protecting social engineering users from information theft or impersonation with techniques including phishing, spam messages or malware designed for that purpose.

▪ Anti-malware: Tools aimed at protecting IT systems (servers, computers, laptops, mobile phones, etc.) against malware such as virus, Trojans, spyware, etc. 17 detecting and eliminating malware to prevent equipment from getting infected.

▪ Technical Audit: Tools to revise and review security from all viewpoints including technical, technological and organisational, and generally using a standard as reference. The purpose is to audit systems, applications and data for the detection of possible security vulnerabilities.

▪ Standard accreditation; Tools to facilitate the security-related standard compliance as well as obtaining standard certification. They are used to implement security policies, applying security measures or for asset valuation among others.

▪ Contingency and continuity: Tools used to plan action and contingency plans to mitigate the impact of any security incidents. These tools aim at recovering systems and processes considered critical in an organization. These solutions include cloud systems, virtualisation and remote backup solutions.

▪ Access control and authentication: Products aimed at implementing mechanisms to manage users or to control access to resources in companies. Authentication mechanisms and tools oriented to using digital certificates are used.

▪ Legal compliance: Tools aimed at facilitating legal compliance with information security regulations and standards, such as the General Data Protection Regulation (GDPR), e-commerce, etc.

▪ Security intelligence: Tools enabling setting up a flow for cybersecurity related event or incident management, to mitigate them in the shortest possible time.

▪ Information leak prevention: Tools used to guarantee information confidentiality, availability and integrity. Their main aim is to prevent the loss of information and to identify, monitor and detect information leaks.

▪ Communication protection: Products aimed at guaranteeing secure communications to prevent unauthorised access or attacks from other networks. They enable traffic control and analysis as well as monitoring use.

▪ Mobile device security: Tools aimed at protecting wireless communications and mobile devices to prevent security incidents.

In addition, elements corresponding to the cybersecurity services category for

monitoring, compliance with the applicable law, security management, continuity in the

event of an incident, etc. and scopes of application are also envisaged.

17 Source: INCIBE Taxonomy of cybersecurity solutions Available at: https://www.incibe.es/sites/default/files/contenidos/guias/doc/taxonomia_ciberseguridad.pdf

https://www.incibe.es/sites/default/files/contenidos/guias/doc/taxonomia_ciberseguridad.pdf


of 95

Table 6. Service Taxonomy

A brief description of each service is included:

▪ Technical Audit: Services aimed at technical security diagnosis, generally based

on a standard, to analyse security status and detect possible vulnerabilities or

security threats. Technical audits may also be conducted after a security incident

to ascertain the causes and consequences of the event.

▪ Standard accreditation: Services oriented to facilitate implementation and

compliance with standards in terms of security and to obtain the corresponding

standard accreditations.

▪ Contingency and continuity: Services aimed at guaranteeing the continuity of

services while protecting critical processes through the preparation and application

of contingency and continuity plans. They facilitate the preparation of contingency

and continuity plans to guarantee the continuity of critical functions in the

organisation.

▪ Legal compliance: Services oriented to guide and help companies to comply with

the current law in relation to technology or information security.

SERVICE CATEGORY People Information Infrastructure Business

Technical Audit

Standard accreditation

Contingency and

continuity

Legal compliance

Training and awareness

Incident management

Solution implementation

Cloud security

Support and maintenance


of 95

▪ Training and awareness: Services aimed at offering information related to

information security to ascertain technical and legal matters regarding information

security.

▪ Incident management: Services used to detect, prevent and solve information

security incidents. Their aim is to obtain information to detect and identify

vulnerabilities in systems. They help to manage security incidents before, during

and after they occur.

▪ Solution implementation: Services aimed at the design, integration and startup

of technological security infrastructures and solutions in organisation for protection

purposes.

▪ Cloud security: Services oriented to protect cloud infrastructures and reduce the

impact of a security incident through backup or recovery policies.

▪ Support and maintenance: Enables a specialised third-party to take over

maintenance tasks, infrastructures or systems on behalf of a company.18

This detailed taxonomy enables the identification of the corresponding cybersecurity

product or service category, helping its classification in the appropriate field of application.

7.3 Company listing

The following listing includes cybersecurity companies established in the Basque Country,

classified by type: manufacturer, wholesaler / distributor, integrator / consultancy, public

bodies, universities, vocational training centres, Basque network and associations.

18 Source: INCIBE Taxonomy of cybersecurity solutions Available at: https://www.incibe.es/sites/default/files/contenidos/guias/doc/taxonomia_ciberseguridad.pdf

Symbol: This is used to indicate companies with tax residence in the Basque Country.

Symbol: This is used to indicate startups with tax residence in the Basque Country.

EMPLOYEES: The number of employees refers to all employees dedicated to cybersecurity.

Legend



of 95

Manufacturers:

▪ Alias Robotics

▪ Bullhost Cloud Services S.L.

▪ CC3M

▪ Countercraft

▪ Custar

▪ EnigMedia

▪ Hdiv

▪ Ibercom – Grupo Masmovil

▪ Ironchip Telco

▪ Keynetic Technologies

▪ Panda Security

▪ Redborder

▪ Relyum

▪ Sealpath

▪ SIE soluciones

▪ Zuratrust

Wholesaler/distributor:

▪ ANER

▪ CDM

▪ EITEK

▪ Exclusive Networks

▪ Ingecom

Integrator / Consultant:

▪ Accenture

▪ ADW Europe

▪ AGP Software

▪ Akirutek SL

▪ Ambar

▪ Asitec servicios informaticos

integrales SL

▪ BeClever

▪ Campus Servicios Telefónicos,

S.L.

▪ ComyMedia Proyectos y

Servicios S.L.

▪ Consulpyme

▪ Cras Vigilans Group

▪ Deloitte Advisory S.L.

▪ Derten

▪ Deusto Sistemas, S.A.

▪ Dimension Data

▪ Ibermática

▪ IBM Global Services

▪ Idom Consulting

▪ Iecisa

▪ Indra

▪ infakt21 informatica s. l

▪ INFORMATICA AMARA S.A.

▪ ITS-Security (Grupo Egile)

▪ Jakin Code

▪ KPMG Asesores SL

▪ LKS (Grupo Mondragón)

▪ MANQIT GESTION

▪ Pantallas Amigas

▪ P3rseus Ciberseguridad S.L.

▪ PKF-Attest

▪ PricewaterhouseCoopers

▪ Prosegur

▪ RKL Integral


of 95

▪ en Colaboración - Consultoría

colaborativa

▪ Encriptia

▪ Entelgy - Innotec

▪ Eupraxia

▪ Euskaltel

▪ Everis

▪ Gaptain (elasTIC Innovation

Hub S.L.)

▪ GFI

▪ Global Factory

▪ Globe Testing

▪ Grupo i68

▪ Guzcor Consultores

▪ Hirusec_

▪ S21sec | Nextel

▪ Sarenet

▪ Sermicro

▪ Sernivel3

▪ Software Quality Systems

▪ SPCnet

▪ Tabira Berezi

▪ TALIO

▪ Telbask, S.L.

▪ Telefónica

▪ Telenor Comunicaciones S.L.

▪ Titanium Industrial Security S.L.

▪ Viewnext

▪ WSG TECH SOLUTIONS SL

Public body19:

▪ "AVPD - Agencia Vasca de

Protección de Datos DBEN –

Datuak Babesteko Euskal

Bulegoa"

▪ Basque CyberSecurity Centre

(SPRI, Ertzaintza, EJIE,

Educación)

▪ Izenpe

Universities:

▪ University of Deusto

▪ Mondragon Goi Eskola

Politeknikoa JMA, SCoop

▪ UPV-EHU

▪ Universidad de Navarra - Tecnun

Vocational Training centre:

▪ Egibide

▪ UNI Eibar-Ermua

▪ IES Xabier Zubiri Manteo BHI

▪ Maristak Durango

19 On this date, the Provincial Council of Gipuzkoa and the City Council of Donostia – San Sebastián are immersed in the creation of ZIUR Fundazioa.


of 95

Basque Science, Technology and Innovation Network:

▪ Basque Center for Applied

Mathematics

▪ Ceit-IK4

▪ IK4-IKERLAN, S. Coop.

▪ Innovalia

▪ Instituto Ibermática de

Innovación

▪ Tecnalia

▪ Vicomtech

Association or Interest Group:

▪ Centro de Ciberseguridad

Industrial

▪ Gaia Cluster

▪ Pribatua

▪ PuntuEus

▪ SAE - Asociación Vasca de

Profesionales de Seguridad - Segurtasun Adituen Euskal

Elkartea

▪ Stop Violencia de Género Digital

▪ VOST Euskadi


of 95

7.3.1 Manufacturers

ADDRESS:

NAME: Alias Robotics

ORGANISATION PROFILE: Startup

URL: www.aliasrobotics.com

EMAIL: [email protected]

TEL.: +34 647 09 56 86

NUMBER OF EMPLOYEES: 3

EMPLOYEES IN THE BASQUE COUNTRY: 3

PRODUCT CATEGORY: SERVICE CATEGORY:

▪ Security intelligence

▪ Technical Audit

▪ Incident management

▪ Technical Audit

▪ Solution implementation

ADDRESS:

NAME: Bullhost Cloud Services S.L.

ORGANISATION PROFILE: SME

URL: www.bullhost.es


TEL.: +34 946 94 13 77




▪ Technical Audit

▪ Contingency and continuity


▪ Technical Audit

▪ Standard accreditation


▪ Legal compliance

▪ Training and awareness



▪ Cloud security

▪ Support and maintenance

C/ Venta de la

Estrella, 7,

Pab.110

01007 Vitoria-

Gasteiz, Araba

Paseo Landabarri, 2

bajo (Edif. Cosimet)

48940 Leioa,

Bizkaia

C/ Virgen del

Carmen, 37 bajo

01400 Llodio,

Araba


of 95

ADDRESS:

NAME: CC3M


URL: www.cc3m.com/


TEL.: +34 944 31 66 11




▪ Access control and authentication


▪ Mobile device security




▪ Cloud security

ADDRESS:

NAME: Countercraft


URL: www.countercraft.eu/


TEL.: +34 943 12 23 20






▪ Information leak prevention

▪ N/A

Paseo Mikeletegi

71

20009 San

Sebastián

Gipuzkoa

Centro de

Conocimiento Bake

Eder Mod. 1.8

Avenida Zugazarte, 32

48930 Getxo, Bizkaia

C/ Venta de la

Estrella, 7,

Pab.110

01007 Vitoria-

Gasteiz, Araba



of 95

ADDRESS:

NAME: Custar


URL: www.custarsl.com


TEL.: +34 945 25 74 27












ADDRESS:

NAME: EnigMedia


URL: https://enigmedia.es


TEL.: +34 943 04 66 61





▪ Communication protection


C/ Mikeletegi

Pasealekua, 71,

20009 San

Sebastián

Gipuzkoa

Manuel Iradier, 7

bajo int

01005 Vitoria-

Gasteiz, Araba


of 95

ADDRESS:

NAME: Hdiv


URL: hdivsecurity.com


TEL.: +34 668 91 01 52




▪ Technical Audit ▪ Technical Audit

ADDRESS:

NAME: Ibercom – Grupo Masmovil


URL: www.ibercom.es


TEL.: +34 722 39 50 00




▪ Anti-fraud



▪ Anti-malware

▪ Technical Audit









▪ Technical Audit



▪ Cloud security

Parque

Empresarial

Zuatzu, Edificio

Easo 2º

20018 San

Sebastián,

Gipuzkoa

Mikeletegi 69, Piso

4

20009 Donostia-

San Sebastián,

Gipuzkoa


of 95

ADDRESS:

NAME: Ironchip Telco


URL: https://ironchip.net/


TEL.: +34 619 43 89 91





▪ Cloud security


ADDRESS:

NAME: Keynetic Technologies


URL: www.keynetic.tech


TEL.: +34 944 74 04 37







▪ Cloud security


Alameda Urquijo

s/n – ETSI Bilbao,

Zitek

48013 Bilbao,

Bizkaia

C/ Espronceda, 4

48902 Barakaldo,

Bizkaia


of 95

ADDRESS:

NAME: Panda Security

ORGANISATION PROFILE: Large enterprise

URL: www.pandasecurity.com


TEL.: +34 944 25 11 00




▪ Anti-fraud

▪ Anti-malware










▪ Cloud security


ADDRESS:

NAME: Redborder


URL: https://redborder.com


TEL.: +34 607 40 74 04







▪ Cloud security


Edificio Miribilla.

Santiago de

Compostela, 12, 1ª

Planta

48003 Bilbao,

Bizkaia

Parque

Tecnológico de

Bizkaia. Edificio

500 - Planta 1

48160 Derio

Bizkaia


of 95

ADDRESS:

NAME: Relyum


URL: www.relyum.com


TEL.: +34 944 42 07 00

NUMBER OF EMPLOYEES: -

EMPLOYEES IN THE BASQUE COUNTRY: -


▪ Communication protection ▪ N/A

ADDRESS:

NAME: Sealpath


URL: www.sealpath.com


TEL.: +34 944 42 59 22





▪ Cloud security

Edificio Udondo,

Planta 6ª; Avd. de

la Ribera de Axpe

nº50

48950 Erandio

Bizkaia

Calle Simón

Bolívar 27, Dpto

29.

48013 Bilbao,

Bizkaia


of 95

ADDRESS:

NAME: Siesoluciones


URL: www.siesoluciones.com


TEL.: +34 943 63 32 59




▪ Anti-fraud

▪ Technical Audit







▪ Technical Audit





▪ Cloud security


ADDRESS:

NAME: Zuratrust


URL: www.zuratrust.com


TEL.: +34 943 09 06 46





▪ Anti-fraud

▪ Anti-malware


Deusto

Entrepreneurship

Center

Innogune -

Mundaiz bidea 50

20012 San

Sebastián

Gipuzkoa

Lamisingo Iturria 1,

oficinas 101-104

20305 Irún,

Gipuzkoa


of 95

7.3.2 Wholesaler / Distributor

ADDRESS:

NAME: Aner


URL: www.aner.com


TEL.: +34 943 13 34 85




▪ Anti-fraud

▪ Anti-malware

▪ Technical Audit









▪ Technical Audit







▪ Cloud security


ADDRESS:

NAME: CDM

ORGANISATION PROFILE: Micro-company

URL: www.seguridad-profesional.com


TEL.: +34 902 01 08 14 / +34 946 00 27 66




▪ N/A ▪ Solution implementation

Avda. San Esteba

nº8 Bilbao Business

Center

48450 Etxebarri,

Bizkaia C/ Araba, 43.

20800 Zarautz,

Gipuzkoa

Avda. El Minero

8A Bajo

48500 Abanto-

Gallarta,

Bizkaia

Avda. de los Olmos, 1.

Edif. D2, Of. 211.

01013 Vitoria-Gasteiz,

Araba


of 95

ADDRESS:

NAME: EITEK


URL: www.eitek.net


TEL.: +34 943 20 30 90




▪ Anti-fraud

▪ Anti-malware

▪ Technical Audit


▪ Contingency and security







▪ Technical Audit







▪ Cloud security


ADDRESS:

NAME: Exclusive Networks


URL: www.exclusive-networks.com/es


TEL.: +34 902 10 88 72




▪ Anti-fraud

▪ Anti-malware







▪ Technical Audit

▪ N/A

C/ Urtzaile, 1 -

Edificio Aurrera -

Local C

20600 Eibar,

Gipuzkoa

Apartado de

correos Nº32

San Sebastián

Gipuzkoa


of 95

ADDRESS:

NAME: Ingecom


URL: www.ingecom.net/


TEL.: +34 944 39 56 78




▪ Anti-fraud

▪ Anti-malware

▪ Technical Audit (vulnerabilities)






▪ Technical Audit

C/ Máximo Aguirre

18 - Bis, 8º Pl

48011 Bilbao,

Bizkaia


of 95

7.3.3 Integrator / Consultant

ADDRESS:

NAME: Accenture


URL: www.accenture.com


TEL.: +34 915 96 60 00




▪ N/A ▪ Technical Audit



ADDRESS:

NAME: ADW Europe


URL: www.adw.es


TEL.: +34 946 22 25 18




▪ Anti-fraud





▪ Technical Audit




▪ Cloud security


Edificio Amboto,

Oficinas 8-9

48220 Abadiño,

Bizkaia

Plaza Euskadi, 5

48011 Bilbao,

Bizkaia


of 95

ADDRESS:

NAME: AGP Software


URL: www.agpsoftware.com


TEL.: +34 944 80 23 45






ADDRESS:

NAME: Akirutek S.L.


URL: www.akirutek.es


TEL.: +34 944 05 26 92







Avda. Zugazarte,

20 bajo izda

48930 Las Arenas,

Getxo,

Bizkaia

C/ Ercilla 16-1º

48010 Bilbao,

Bizkaia


of 95

ADDRESS:

NAME: Ambar


URL: www.ambar.es


TEL.: +34 902 20 30 41







ADDRESS:

NAME: Asitec servicios informaticos integrales S.L.


URL: www.asitec.es


TEL.: +34 945 20 51 31




▪ Technical Audit




▪ Technical Audit



Av. Los Olmos 1 Ed. D3


Araba

Polígono Kareaga

Goikoa

C/Junqueral, Nº9,

Módulo 40

48903 Barakaldo,

Bizkaia

C/Madre Teresa

de Calcuta Nº 8

01008 Vitoria-

Gasteiz, Araba


of 95

ADDRESS:

NAME: BeClever


URL: http://beclever.solutions


TEL.: +34 946 07 33 41




▪ Anti-fraud

▪ Anti-malware

▪ Technical Audit








▪ Technical Audit





▪ Cloud security


ADDRESS:

NAME: Campus Servicios Telefónicos, S.L.


URL: www.campus-cst.com


TEL.: +34 946 94 10 50




▪ Anti-malware

▪ Technical Audit



▪ Technical Audit





Carretera Bilbao-

Galdakao 10

(Bolueta)

2º planta, Módulos 2

y 3

48004 Bilbao,

Bizkaia

C/ Pérez Galdós,

22,

48010 Bilbao,

Bizkaia


of 95

ADDRESS:

NAME: comyMedia Proyectos y Servicios S.L.


URL: www.comymedia.com


TEL.: +34 943 31 60 68




▪ Anti-fraud

▪ Anti-malware

▪ Technical Audit







▪ Technical Audit





▪ Cloud security


ADDRESS:

NAME: Consulpyme


URL: http://consulpyme.com/


TEL.: +34 691 81 64 42




▪ N/A ▪ Legal compliance


Grupo Santo

Domingo de

Guzman 14

(Access via

Calzadas de

Mallona)

48006 Bilbao,

Bizkaia

Parque Empresarial de

Zuatzu, Edificio

Zurriola, planta 0

oficina 2

20018 San Sebastián

Gipuzkoa


of 95

ADDRESS:

NAME: Cras Vigilans Group


URL: http://cv2group.com


TEL.: +34 945 33 95 27




▪ Technical Audit







ADDRESS:

NAME: Deloitte Advisory S.L.


URL: https://www2.deloitte.com/es


TEL.: +34 944 44 70 00 / +34 915 14 50 00




▪ Access control and authentication ▪ Technical Audit







▪ Cloud security



C/ Mendigorritxu, 138


Araba

C/ Ercilla 24

48011 Bilbao,

Bizkaia

Plaza Julio Caro

Bajora 2

20018 San

Sebastián,

Gipuzkoa


of 95

ADDRESS:

NAME: Derten


URL: https://derten.com


TEL.: +34 945 14 53 80




▪ Anti-fraud

▪ Anti-malware

▪ Technical Audit









▪ Technical Audit







▪ Cloud security


ADDRESS:

NAME: Deusto Sistemas, S.L.


URL: www.deustosistemas.net


TEL.: +34 945 20 06 55 / +34 944 41 46 04




▪ Technical Audit












▪ Cloud security


Plaza del Museo,

1–3ª Planta

48009 Bilbao,

Bizkaia

Pl. Pinares, 1 5° Ofi. 1


Gipuzkoa

Alameda Mazarredo 39

4º C

48009 Bilbao,

Bizkaia

Parque empresarial Inbisa,

Av. Zumar, 1


Araba

Paduleta, 55 1° Ofi. 203


Araba


of 95

ADDRESS:

NAME: Dimension Data


URL: www2.dimensiondata.com


TEL.: +34 629 01 85 86




▪ Anti-fraud

▪ Anti-malware

▪ Technical Audit







▪ Technical Audit




▪ Cloud security


ADDRESS:

NAME: en Colaboración – Consultoría colaborativa


URL: www.encolaboracion.net


TEL.: +34 667 84 04 99











▪ Cloud security


Loitzaga 13, 4ºB

48903 Barakaldo,

Bizkaia

Alameda Gregorio de la

Revilla 27, 5ª planta

48010 Bilbao,

Bizkaia


of 95

ADDRESS:

NAME: Encriptia


URL: www.encriptia.com


TEL.: +34 945 06 70 00




▪ N/A ▪ Incident management ▪ Technical Audit





ADDRESS:

NAME: Entelgy - Innotec


URL: www.innotecsystem.com


TEL.: +34 944 23 11 04




▪ Anti-fraud

▪ Anti-malware




▪ Technical Audit







▪ Cloud security


C/ Colón de

Larreategui 26, 4ºC

48009 Bilbao,

Bizkaia Paseo Bera-Bera, 19


Gipuzkoa

C/ Portuetxe, 53

20018 San

Sebastián

Gipuzkoa

C/ Nervión, 3,

48001 Bilbao,

Bizkaia

C/ Barratxi 8


Araba

C/ Albert Einstein 15, Oficina

19 Parque Tecnológico de

Araba 01510 Vitoria-Gasteiz,

Araba

P. Empresarial Inbisa-Gamarra

Avda Olmos, 1

Zona D 2 Oficina 8

01013 Vitoria-Gasteiz, Araba


of 95

ADDRESS:

NAME: Eupraxia


URL: www.eupraxia.es


TEL.: +34 915 75 39 21 / +34 946 18 24 80




▪ Anti-malware




▪ Technical Audit



ADDRESS:

NAME: Euskaltel


URL: www.euskaltel.com


TEL.: +34 944 01 10 00




▪ Anti-fraud

▪ Anti-malware

▪ Technical Audit







▪ Technical Audit





▪ Cloud security


Alameda de

Rekalde, 9

3ªIzquierda

48009 Bilbao,

Bizkaia

Edificio 809. Parque

Científico y

Tecnológico de

Bizkaia

48160 Derio

Bizkaia

Polígono Industrial de Júndiz

C/Zazoba, Nave 2.2- Este


Araba

Pilotegi Bidea, 2

PI. 3º oficina 301

20018 San

Sebastián

Gipuzkoa


of 95

ADDRESS:

NAME: Everis


URL: www.everis.com/spain/es


TEL.: +34 944 22 90 80




▪ Anti-malware

▪ Technical Audit














▪ Technical Audit

ADDRESS:

NAME: Gaptain (elasTIC Innovation Hub S.L.)


URL: www.gaptain.com


TEL.: +34 648 28 17 75




▪ Anti-fraud

▪ Anti-malware










Euskadi Plaza, 5

48009 Bilbao,

Bizkaia

Edificio Ilgner.

Altos Hornos de

Vizcaya, 33. 48901

Barakaldo

Bizkaia


of 95

ADDRESS:

NAME: GFI


URL: es.gfi.world/es/


TEL.: +34 944 24 18 25




▪ Security intelligence ▪ Support and maintenance



▪ Cloud security

▪ Technical Audit





ADDRESS:

NAME: Global Factory


URL: www.globalfactory.es


TEL.: +34 946 61 27 74




▪ Standard accreditation ▪ Technical Audit





Licenciado Poza

55 - 6ª

48013 Bilbao,

Parque

Tecnológico de

Zamudio. Edificio

207 – A. Planta 1.

48170 Zamudio,

Bizkaia Viena, 3. Entreplanta.


Araba

Paseo de

Mikeletegi, 64

Planta 1 Local 122

20009 San

Sebastián Gipuzkoa

C/ Nerbioi, 3,

48001 Bilbao,

Bizkaia


of 95

ADDRESS:

NAME: Globe Testing


URL: www.globetesting.com


TEL.: +34 945 29 83 52 / +34 650 06 00 09








ADDRESS:

NAME: Grupo i68


URL: www.grupoi68.com


TEL.: +34 943 31 14 55




▪ Anti-fraud

▪ Anti-malware

▪ Technical Audit










▪ Cloud security


Parque empresarial

Boroa P2-A4 D4 y D5

48180 Amorebieta-

Etxano,

Bizkaia Zuatzu, 4 - 1º.

20018 San

Sebastián,

Gipuzkoa

Albert Einstein, 46

Edif. E7 Oficina 206


Araba


of 95

ADDRESS:

NAME: Guzcor Consultores


URL: www.guzcor.com


TEL.: +34 945 26 53 55

NUMBER OF EMPLOYEES: < 10

EMPLOYEES IN THE BASQUE COUNTRY: < 10



▪ Technical Audit


▪ Technical Audit

ADDRESS:

NAME: Hirusec_


URL: https://hirusec.es/


TEL.: +34 943 35 91 41









C/ Ubarburu 7,

trasera 4-C

20014 San

Sebastián

Gipuzkoa

Piso 1º oficina D 2, C/

Francia, 21


Araba


of 95

ADDRESS:

NAME: Ibermática


URL: ibermatica.com


TEL.: +34 945 16 51 00











▪ Cloud security


ADDRESS:

NAME: IBM Global Services


URL: www.ibm.com/ibm/es/es/

EMAIL: web contact form

TEL.: +34 913 97 66 11

NUMBER OF EMPLOYEES: 8000+



▪ Anti-fraud

▪ Technical Audit







▪ Technical Audit







▪ Cloud security


Cercas Bajas, 7 int. –

Oficina 2


Araba

Parque Tecnológico de Araba

Leonardo Da Vinci, 9 – 2º -

Edificio E5


Paseo Mikeletegi 5

San Sebastián

Gipuzkoa

Parque

Tecnológico de

Bizkaia

Ibaizabal Bidea.

Edif 501-A

48160 Derio

Bizkaia

Mintegi

pasalekua, 47

20018 San

Sebastián,

Gipuzkoa

Laga Bidea,

edificio 80B Derio

Avenida de

Algorta, 16

48990 Bilbao,

Bizkaia

Estrasburgo 2,


Araba


of 95

ADDRESS:

NAME: Idom Consulting


URL: www.idom.com/es


TEL.: +34 944 70 76 00




▪ Technical Audit









▪ Technical Audit




ADDRESS:

NAME: Iecisa


URL: www.iecisa.com


TEL.: +34 944 47 80 45




▪ Anti-fraud

▪ Anti-malware

▪ Technical Audit













▪ Technical Audit



▪ Cloud security

Avenida Lehendakari

Aguirre, 9

48014 Bilbao,

Bizkaia

Avda. Zarandoa, 23

48015 Bilbao,

Bizkaia

Parque Empresarial

Zuatzu. Edificio

Donosti, C/ Zuatzu, 5

20018 San

Sebastián

Gipuzkoa C/ Pintor Adrián Aldecoa, 1


Araba


of 95

ADDRESS:

NAME: Indra


URL: www.indracompany.com/


TEL.: +34 944 20 11 00




▪ Technical Audit





▪ Technical Audit







▪ Cloud security


ADDRESS:

NAME: infakt21 informática S.L.


URL: infakt21.com


TEL.: +34 658 40 14 20




▪ Technical Audit


▪ Technical Audit

Calle Matiko 6 1ª

planta

48007 Bilbao,

Bizkaia

C/ Ibaibe 29,

1ªplanta Oficina 5

48902 Barakaldo,

Bizkaia


of 95

ADDRESS:

NAME: Informática Amara S.A.


URL: www.infoamara.com

EMAIL: infoamara@ infoamara.com

TEL.: +34 94347 42 62







ADDRESS:

NAME: ITS-Security (Grupo Egile)


URL: www.its-security.es/


TEL.: +34 902 10 26 55




▪ Anti-fraud

▪ Anti-malware

▪ Technical Audit









▪ Technical Audit







▪ Cloud security


Astigarragako

bidea 2 – 5º OF 10

20180 Oiartzun

Gipuzkoa

Polígono Kurutz

Gain 12-13

20850 Mendaro,

Gipuzkoa

Parque Tecnológico

de Zamudio. Laida

Bidea 205

48170 Zamudio,

Bizkaia


of 95

ADDRESS:

NAME: Jakin Code


URL: www.jakincode.com


TEL.: +34 945 19 84 26






▪ Technical Audit





ADDRESS:

NAME: KPMG Asesores S.L.


URL: home.kpmg.com/es/es/


TEL.: +34 914 56 34 00







▪ Technical Audit







▪ Cloud security


C/ Adriano VI 20, 4º Of. 6


Araba

Avda. de la libertad,

17-19


Gipuzkoa

Plaza Euskadi, 5

48009 Bilbao,

Bizkaia


of 95

ADDRESS:

NAME: LKS (Grupo Mondragón)


URL: www.lks.es/C/CO/MONDRAGON.aspx


TEL.: +34 902 54 09 90











▪ Cloud security


ADDRESS:

NAME: Manqit gestión


URL: www.manqit.es


TEL.: +34 689 85 54 89







Carretera

Ollarretxe, 23 - 3º,

Dpto.2

48991 Getxo,

Bizkaia

Parque Tecnológico

Zamudio, Edificio

207- A Bajo

48170 Zamudio,

Bizkaia

Parque Empresarial

de Zuatzu, Ed.

Urumea, Planta 1ª,

Local 1

Zubiberri Bidea, 31

20018 San

Sebastián

Gipuzkoa


of 95

ADDRESS:

NAME: Pantallas Amigas


URL: www.pantallasamigas.net


TEL.: +34 605 72 81 21




▪ N/A ▪ Training and awareness

ADDRESS:

NAME: P3rseus


URL: www.p3rs.eus

EMAIL: [email protected], [email protected]

TEL.: +34 622 83 03 48 / +34 946 08 68 27







▪ Cloud security


Parque

Tecnológico de

Bizkaia.

Laga Bidea,

Edificio 804

48160 Derio,

Bizkaia

C/ Indautxu, nº 9,

bajo

48011 Bilbao,

Bizkaia


of 95

ADDRESS:

NAME: PKF-Attest


URL: www.pkf-attest.es/

EMAIL: [email protected], [email protected]

TEL.: +34 944 24 30 24








ADDRESS:

NAME: PricewaterhouseCoopers


URL: www.pwc.es

EMAIL: Website form

TEL.: +34 902 02 11 11











▪ Cloud security

Bizkaia Alda.

Recalde 36

48009 Bilbao,

Bizkaia

Plaza de Euskadi

5, planta 10-11

48009 Bilbao,

Bizkaia

Paseo de

Miraconcha, 25-

Bajo

20007 San

Sebastián,

Gipuzkoa

Paseo de Colón, 2 - 1ª

planta


Gipuzkoa

Eduardo Dato 12,

3ª planta, 01005

Vitoria-Gasteiz

Araba



of 95

ADDRESS:

NAME: Prosegur


URL: www.prosegur.es


TEL.: +34 944 75 88 13 / +34 636 76 33 06




▪ Anti-fraud

▪ Anti-malware

▪ Technical Audit









▪ Technical Audit







▪ Cloud security


ADDRESS:

NAME: RKL Integral


URL: http://rklintegral.com


TEL.: +34 946 40 10 11




▪ Standard accreditation ▪ Standard accreditation

▪ Technical Audit




C/ Nemesio

Mogrobejo, 3

48015 Bilbao,

Bizkaia

Zubibarri kalea, 9, 1ª

Planta


Araba

Errekatzulo kalea, 1 -

Polígono Industrial

Belartza

20018 San Sebastián,

Gipuzkoa

Alameda San Mames 37,

planta 2, Dpto 1

48010 Bilbao,

Bizkaia


of 95

ADDRESS:

NAME: S21sec | Nextel


URL: www.s21sec.com/es/

EMAIL: [email protected] / [email protected]

TEL.: +34 900 84 07 30 / +34 22 25 943 083/ +34 943 317 083






▪ Technical Audit







▪ Cloud security


ADDRESS:

NAME: Sarenet


URL: www.sarenet.es


TEL.: +34 902 23 90 76 / +34 94 420 94 70








▪ Cloud security


C/ Camino de

Laida Edificio 207,

Bloque B 1º planta

Zamudio

48170 Bizkaia

Avda. de los Huetos 75,

oficina 38


Araba

Parque

Tecnológico.

Edificio 103,

48170Zamudio

Bizkaia

P.E. Zuatzu Ed.

Urgull, 2º San

Sebastián 20018,

Gipuzkoa / Portuetxe

Bidea 83, Planta 2ª –

9 20018 San

Sebastián, Gipuzkoa




of 95

ADDRESS:

NAME: Sermicro


URL: www.sermicro.com


TEL.: +34 944 76 06 35




▪ Anti-fraud

▪ Anti-malware

▪ Technical Audit













▪ Cloud security


ADDRESS:

NAME: Sernivel3


URL: www.sernivel3.es


TEL.: +34 944 25 52 63 / +34 625 08 07 37




▪ Anti-fraud

▪ Anti-malware

▪ Technical Audit



▪ Cybersecurity intelligence




▪ Technical Audit






Ctra. Bilbao-Plencia

17, PAE ASUARAN

edificio Artxanda,

Portal 7, 2B

Pabellones 12-13

48950 Asua –

Erandio, Bizkaia

Calle Rodríguez

Arias, nº 23.

48009 Bilbao,

Bizkaia

http://www.sermicro.com/


of 95

ADDRESS:

NAME: Software Quality Systems


URL: www.sqs.es


TEL.: +34 944 80 46 17




▪ Technical Audit



▪ Technical Audit


ADDRESS:

NAME: SPCnet


URL: www.spcnet.info


TEL.: +34 945 29 71 00




▪ Anti-malware

▪ Technical Audit








▪ Technical Audit



▪ Cloud security


C/Albert Einstein 44.

Edificio E-6.


Avda. Zugazarte 8 - 6º,

48930 Getxo,

Bizkaia


of 95

ADDRESS:

NAME: Tabira Berezi


URL: tabiraberezi.com


TEL.: +34 946 81 22 04




▪ N/A ▪ Support and maintenance




ADDRESS:

NAME: Talio


URL: www.talio.it


TEL.: +34 946 51 99 90




▪ Anti-fraud

▪ Anti-malware

▪ Technical Audit






▪ Technical Audit



▪ Cloud security


Polígono

Aliendalde, Nave

11F

48200 Durango,

Bizkaia

Alameda

Mazarredo 69 – 81

48009 Bilbao,

Bizkaia


of 95

ADDRESS:

NAME: Telbask S.L.


URL: www.telbask.es


TEL.: +34 945 00 11 50




▪ Anti-fraud

▪ Anti-malware

▪ Technical Audit









▪ Technical Audit







▪ Cloud security


ADDRESS:

NAME: Telefónica


URL: www.telefonica.com

E-MAIL: [email protected]

TEL.: +34 944 88 30 01




▪ Anti-fraud

▪ Anti-malware

▪ Technical Audit









▪ Technical Audit







▪ Cloud security


c/ Astinze, 6 - 5

48160 Derio

Bizkaia

c/ Paduleta, 55 of.

No. 110 -111

01015 Vitoria-

Gasteiz,

Araba

Buenos Aires 10,

48001, Bilbao

Bizkaia

Sagrada Familia 5,

2ª Planta , 20010

San Sebastián

Gipuzkoa Loreto de Arriola 1,

01010, Vitoria-Gasteiz

Araba


of 95

ADDRESS:

NAME: Telenor Comunicaciones S.L.


URL: www.telenorcomunicaciones.com


TEL.: +34 943 31 03 67




▪ Anti-fraud

▪ Anti-malware

▪ Technical Audit





▪ Technical Audit




ADDRESS:

NAME: Titanium Industrial Security S.L.


URL: www.titaniumindustrialsecurity.com


TEL.: +34 902 54 08 91




▪ Anti-fraud

▪ Anti-malware

▪ Technical Audit








▪ Technical Audit







▪ Cloud security


C/ San Antolin, 3

20870 Elgoibar,

Juan Fermín

Gilisagasti 2

Oficina 316,

20018 San

Sebastián

Gipuzkoa

Paseo de

Portuetxe 53B,

Oficina 113, Igara,

San Sebastian,

Gipuzkoa


of 95

ADDRESS:

NAME: Viewnext


URL: www.viewnext.com


TEL.: +34 944 91 52 00




▪ Anti-fraud

▪ Technical Audit






▪ Technical Audit





▪ Cloud security


ADDRESS:

NAME: WSG Tech solutions S.L.


URL: https://wsg127.com


TEL.: +34 910 70 05 49




▪ Anti-fraud

▪ Anti-malware






▪ Technical Audit





Plaza Euskadi 5, “Torre

Iberdrola” Planta 16

48009 Bilbao,

Bizkaia

Avenida Zugazarte,

32, 48930 Getxo

Bizkaia


of 95

7.3.4 Public Administration

ADDRESS:

NAME: AVPD - Agencia Vasca de Protección de Datos DBEN – Datuak Babesteko Euskal Bulegoa


URL: www.avpd.eus


TEL.: +34 945 01 62 30






ADDRESS:

NAME: The Basque CyberSecurity Centre


URL: www.basquecybersecurity.eus


TEL.: +34 945 01 00 59









C/ Beato Tomás de

Zumárraga, 71, 3ª Planta


Araba


Albert Einstein. 46-3ª – Ed. E7


Araba


of 95

ADDRESS:

NAME: Izenpe


URL: www.izenpe.eus /


TEL.: +34 945 01 62 90 / +34 945 06 77 23




▪ N/A ▪ Standard accreditation



▪ Cloud security


Avenida Beato Tomás de

Zumárraga, 71 01008

Vitoria-Gasteiz, Araba


of 95

7.3.5 University

ADDRESS:

NAME: University of Deusto

ORGANISATION PROFILE: University

URL: www.deusto.es


TEL.: +34 609 44 26 11





▪ Technical Audit

ADDRESS:

NAME: Mondragon Goi Eskola Politeknikoa JMA, S. Coop.


URL: www.mondragon.edu


TEL.: +34 943 79 47 00





▪ Technical Audit



Unibertsitate Etorb.,

24. 48007 Bilbao,

Bizkaia

Egibide, Francia Kalea, 32,


Araba

Kalea Mundaiz, 50,

20012 San Sebastián,

Gipuzkoa

C/ Loramendi, 4,

Edificio 6

20500 Arrasate,

Gipuzkoa


of 95

ADDRESS:

NAME: Universidad de Navarra - Tecnun


URL: www.tecnun.es


TEL.: +34 943 21 98 77









ADDRESS:

NAME: UPV-EHU


URL: www.ehu.eus/es/

EMAIL: [email protected] / [email protected]

TEL.: +34 946 01 20 00




▪ Technical Audit







▪ Technical Audit





Paseo de Manuel

Lardizabal, 13,

20018 San

Sebastián,

Gipuzkoa

Universidad del País

Vasco / Euskal Herriko

Unibertsitatea

Barrio Sarriena s/n

48940 Leioa,

Bizkaia


of 95

7.3.6 Vocational Training centres

ADDRESS:

NAME: Egibide


URL: www.egibide.org


TEL.: +34 945 01 01 30

NUMBER OF EMPLOYEES:

EMPLOYEES IN THE BASQUE COUNTRY:



ADDRESS:

NAME: Uni Eibar-Ermua


URL: www.uni.eus


TEL.: +34 943 20 844 44





C/ Nieves Cano, 10


Araba

Av Otaola 29

Eibar 20600 ,

Gipuzkoa



of 95

ADDRESS:

NAME: Maristak Durango


URL: www.maristak.com/es


TEL.: +34 946 81 00 58





ADDRESS:

NAME: IES Xabier Zubiri Manteo BHI


URL: www.zubirimanteo.hezkuntza.net


TEL.: +34 943 27 87 00





Juan Antonio Abasolo

Kalea, 6,

48200 Durango,

Bizkaia

Calle Jose Miguel

Barandiaran, 10-12


Gipuzkoa


of 95

7.3.7 Basque Science, Technology and Innovation Network

ADDRESS:

NAME: IK4-Ikerlan S.Coop.


URL: https://www.ikerlan.es


TEL.: +34 943 71 24 00








▪ Cloud security

ADDRESS:

NAME: Basque Center for Applied Mathematics

ORGANISATION PROFILE: Research and Technology Centre

URL: www.bcamath.org/es/


TEL.: +34 946 56 78 42




▪ N/A




Alameda de

Mazarredo 14

48009 Bilbao,

Bizkaia

Jose M. Arizmendiarrieta Ibilbidea, 2

20500 Arrasate,

Gipuzkoa


of 95

ADDRESS:

NAME: Ceit-IK4


URL: http://ceit.es/es/


TEL.: +34 943 21 28 00







▪ Technical Audit




▪ Cloud security

▪ Technical Audit





ADDRESS:

NAME: Innovalia


URL: www.innovalia.org


TEL.: +34 944 8051 64





Paseo Mikeletegi,

No. 48 20009

San Sebastián

Gipuzkoa

Paseo de Manuel

Lardizábal, Nº 15


Gipuzkoa

Calle Rodríguez Arias,

6 Dto. 605, 48008

Bilbao (Bizkaia)

Parque Tecnológico de

Bizkaia. Edificio 500

Planta 1

Derio (Bizkaia)

Parque Empresarial

P2-A4, 48340

Amorebieta (Bizkaia)



of 95

ADDRESS:

NAME: Vicomtech


URL: www.vicomtech.org


TEL.: +34 943 30 92 30 / +34 690 05 07 27





▪ Anti-malware





ADDRESS:

NAME: Tecnalia


URL: www.tecnalia.com/es/


TEL.: +34 656 79 16 13







▪ Technical Audit




▪ Cloud security

Parque Científico

y Tecnológico de

Gipuzkoa

C/ Mikeletegi

Pasealekua, 2,

E-20009 San

Sebastián

Gipuzkoa Albert Einstein, 28

E-01510 Vitoria-Gasteiz,

Araba

Parque Científico y

Tecnológico de

Bizkaia Edificio

700

48160 Derio,

Bizkaia

Mikeletegi

Pasealekua, 57,

Parque

Tecnológico de

San Sebastián

20009 San

Sebastián

Gipuzkoa


of 95

7.3.8 Associations

ADDRESS:

NAME: Centro de Ciberseguridad Industrial


URL: www.cci-es.org

EMAIL: web form

TEL.: +34 910 91 07 51





ADDRESS:

NAME: Gaia Cluster


URL: www.gaia.es


TEL.: +34 943 31 10 66 / +34 902 54 03 21





Portuetxe Bidea,

14

20018 San

Sebastián,

Gipuzkoa

Paseo Uribitarte, 3

- 3ª Planta

48001 Bilbao,

Bizkaia


of 95

ADDRESS:

NAME: Pribatua


URL: www.pribatua.org


TEL.: +34 618 19 12 53








ADDRESS:

NAME: PuntuEus


URL: www.domeinuak.eus


TEL.: +34 943 08 50 51




▪ N/A ▪ Cloud security

Plaza Sagrado

Corazón, 4

48011 Bilbao,

Bizkaia

Camino Mundaiz 50,

University of Deusto

Garate Innogunea,


Gipuzkoa


of 95

ADDRESS:

NAME: SAE Asociación Vasca de Profesionales de Seguridad Segurtasun Adituen Euskal Elkartea


URL: www.sae-avps.eus


TEL.: +34 618 19 12 53








ADDRESS:

NAME: Stop Violencia de Género Digital


URL: www.stopviolenciadegenerodigital.com


TEL.: +34 914 62 48 20

NUMBER OF EMPLOYEES: < 200

EMPLOYEES IN THE BASQUE COUNTRY: < 200



Calle Rodríguez

Arias, nº 17. 2º -

48011 Bilbao,

Bizkaia


of 95

ADDRESS:

NAME: VOST Euskadi


URL: www.vosteuskadi.org

EMAIL: web form

TEL.: 112





Plaza La Salve 4, 3ºB

48008 Bilbao,

Bizkaia


of 95

8. CONCLUSIONS

The cybersecurity risk scenario is currently undergoing constant evolution. There has

been an increase in the quantity and variety of threats against information and ICT

infrastructures which affect users including citizens, the private sector and public

organisations.

The Basque Government is undoubtedly in a favourable position to take the leading role

required to encourage the application of cybersecurity in industry and raise

awareness regarding cyberspace protection among citizens as it underpins all basic

services, critical infrastructures, economy and progress as a society.

Cybersecurity is emerging as a business opportunity for many organizations; however,

this is often a breeding ground for professional intrusion. Thus, stronger measures are

required to prevent this. In this context, company culture and values, such as transparency

and trust-building in relationships with clients whose needs must be satisfied, play a major

role.

In this regard, major changes are required, based on the different players and

stakeholders (private and public organisations, terrorist groups, organised crime and

hacktivism), that must be taken into account when developing a suitable cybersecurity

strategy consisting of an integrated security concept and a prevention culture. Recent

transpositions of European laws (such as NIS and GDPR Regulations) cannot be

overlooked in this context.

Cybersecurity is also emerging as a sustainable quality employability channel for the

forthcoming decades. In fact, the Basque Country has a high (and growing) number of

specialist companies operating in the cybersecurity sector, including vendors, wholesalers

or integrators dedicated to provide technological products and/or services designed for

cybersecurity.

To help businesses tap into new professional talents at local level, the Basque

Government is fostering Dual Vocational Training (DVT) as a priority. In the short term,

this tool promises to play a major role with greater impact than University (in a longer

term). The reasons supporting the above statement are: a higher number of graduates on

the one hand and the type of professional profiles generated by DVT oriented to

performing tasks related to the operation of cybersecurity infrastructures, on the other.

Furthermore, in 2017 the Basque Government launched the Basque CyberSecurity

Centre to undertake two main functions: on the one hand, to provide services to improve

the prevention and reaction capacity of businesses and sensitive facilities in the Basque

Country against potential cyber threats or attacks; and on the other, to position the Basque

Country as a leading ecosystem in Europe regarding cybersecurity.


of 95

Moreover, as a cybersecurity leader in the Basque Country, the BCSC advocates

innovation in technology used for professional qualification while encouraging the

use of platforms based on the modelling of simulated scenarios (Cyber Range), enabling

the capture of natural talent at an early age, fostering vocation towards digital jobs,

recycling professionals with growing digitalisation, while reducing human error rates in

industrial processes.

Nevertheless, the ghost of captivity related to technological dependency in Europe

(and the Basque Country is no exception) on the USA or Israeli economies, is always

present. Europe must progress to develop its own technology, fostering research and

encouraging the creation of scalable technological startups. This is a global challenge

where ecosystems with very strong financial backings compete against each other. One

way of addressing this challenge with a higher likelihood of success would be to support

the development and specialisation of those ecosystems with the highest potential

in Europe, where the Basque Country represents one of the most comprehensive and

consolidated proposals.

It is important to seize the opportunity offered by saturation due to a lack of professionals

and high labour costs in the current leading ecosystems (USA or Israel). The density of

startups and companies dedicated to the application of cybersecurity in the Basque

Country is very unique and the concentration is significantly above the Spanish global

rate (and also the European average rate). The predominantly innovative nature of the

Basque Country boosted by infrastructures such as the Basque Digital Innovation Hub,

as well as its entrepreneurial tradition, research capacity and local advanced

manufacturing as the perfect testbed for pilot deployments, create a unique niche, an ideal

environment to create cybersecurity technology aimed at the strategic industry in the

region.

The creation of a specialised technological cybersecurity hub, with the Basque

Cybersecurity Centre as its natural driver, is emerging as one of the biggest challenges

and a real medium-term opportunity as most of the necessary elements have already

emerged naturally over the last 20 years.

To maximise this trailblazing effect exercised by an increasingly digitalised advanced

manufacturing industry, the cybersecurity hub specialisation strategy would operate within

the framework and in alignment with Basque Industry 4.0 strategy. This means, the

manufacturing industry would be the main beneficiary of the hub development, increasing

its competitiveness on markets and acting as a reliable player. All in all, this would

contribute to improving the Basque capacity to attract foreign investment, large digital

companies not to mention internationally renowned professional talents.


of 95

9. BIBLIOGRAPHY

▪ ITU – Ciberseguridad

▪ Techtrade – Las 15 principales estadísticas

▪ Symantec cybersecurity company

▪ INCIBE - Spanish National Cybersecurity Institute

▪ Eustat and the European Commission. European Innovation Scoreboard (EIS)

▪ IndusSec 2018: “Ciberseguridad para la Industria” (cybersecurity for Industry)

Available at: http://www.spri.eus/es/basque-industry-comunicacion/indussec-

2018-ciberseguridad-la-industria/

▪ Industry 4.0, MINETUR

Available at:

https://www.w3c.es/Eventos/2016/DiaW3C/Presentaciones/minetur.pdf

▪ “Reflexiones sobre la Industria 4.0 desde el caso vasco” (Reflecting on Industry 4.0 from the Basque case)

Available at: http://www.euskadi.eus

▪ PwC. “Temas candentes ciberseguridad” (Hot topic on cybersecurity) Available at: https://www.pwc.es/es/publicaciones/gestion-

empresarial/assets/temas-candentes-ciberseguridad.pdf

▪ PwC. The Global State of information security survey 2017

▪ Real Instituto Elcano. Ciberseguridad en España

Available at:

https://www.files.ethz.ch/isn/118153/ARI102-2010_Fojon_Sanz_ciberseguridad_Espana.pdf

▪ INCIBE Estudio de evaluación de incidentes (Incident evaluation study)

▪ Sophos. “Estudio Nacional de seguridad de pymes” (National Security Study of SMEs)

▪ GARTNER. Gasto mundial en seguridad de la información (Global expenditure on

information security)

Gartner Digital Risk & Security hub

▪ INCIBE Taxonomía de soluciones de ciberseguridad (Cybersecurity solutions

taxonomy)

Available at:

https://www.incibe.es/sites/default/files/contenidos/guias/doc/taxonomia_ciberseg

uridad.pdf



https://www.w3c.es/Eventos/2016/DiaW3C/Presentaciones/minetur.pdf

http://www.euskadi.eus/

https://www.pwc.es/es/publicaciones/gestion-empresarial/assets/temas-candentes-ciberseguridad.pdf

https://www.pwc.es/es/publicaciones/gestion-empresarial/assets/temas-candentes-ciberseguridad.pdf



http://www.gartner.com/technology/topics/digital-risk-security.jsp



7. LISTING OF CYBERSECURITY COMPANIES AND SOLUTIONS€¦ · Directive (known as NIS Directive)...

Documents

Transcript of 7. LISTING OF CYBERSECURITY COMPANIES AND SOLUTIONS€¦ · Directive (known as NIS Directive)...