{"id":3208,"date":"2026-07-01T08:07:20","date_gmt":"2026-07-01T08:07:20","guid":{"rendered":"https:\/\/inprotech.es\/?p=3208"},"modified":"2026-07-01T08:07:20","modified_gmt":"2026-07-01T08:07:20","slug":"industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation","status":"publish","type":"post","link":"https:\/\/inprotech.es\/en\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\/","title":{"rendered":"Industrial cybersecurity in Galicia: from regulation to real-world operation"},"content":{"rendered":"

By Beatriz Gonz\u00e1lez, IS Consultant at Inprotech.<\/em><\/p>\n


\n<\/i>The publication of AMTEGA’s catalogue of best practices and controls for ICS environments comes at a particularly relevant moment for Galician industry. The combination of greater connectivity, IT\/OT convergence and new regulatory requirements is raising the level of exposure for factories, critical infrastructure and essential services.<\/span>
\nThe great value of this document is that it avoids a simplistic view of industrial cybersecurity. It does not propose a closed list of products or a universal recipe, but rather a functional framework for understanding which controls to apply, when to prioritise them and how to adapt them to each organisation’s reality.<\/span><\/p>\n

Security designed to operate<\/b><\/h2>\n

In industrial environments, availability matters as much as confidentiality. A technically correct control may be inapplicable if it compromises the process, breaks continuity or alters functional safety.<\/span>
\nThat is why the catalogue insists on a pragmatic approach: defence in depth, risk analysis and gradual deployment of measures. Segmentation, access restriction, network visibility and enhanced monitoring stop being \u201cgood ideas\u201d and become operational pillars.<\/span><\/p>\n

Compensating controls: key in OT<\/b><\/h2>\n

One of the most valuable aspects of the document is its attention to compensating controls. In OT, it is not always possible to patch, shut down or replace an asset with the speed that a traditional IT policy would require.<\/span>
\nIn that context, an effective control may come from limiting access, hardening configurations, reducing exposure, controlling external devices or reinforcing early detection. In other words, managing risk with operational intelligence, not just technology.<\/span><\/p>\n

IT and OT: the same risk surface<\/b><\/h2>\n

The convergence between IT and OT has widened the attack surface of industrial organisations. Today, email, remote access, cloud services, digital identity and centralised event management are also part of the industrial security equation.<\/span>
\nThis integrated view is especially important for Galicia, where industry needs to combine productivity, resilience and compliance in an increasingly regulated environment. In practice, this requires aligning operations, maintenance, engineering and cybersecurity teams under a single set of priorities.<\/span><\/p>\n

From guidance to continuous improvement<\/b><\/h2>\n

More than a theoretical document, this catalogue works as a roadmap. It allows organisations to identify gaps, prioritise investments and build a realistic maturity plan, tailored to each organisation’s resources and risk.<\/span>
\nThe main lesson is clear: industrial cybersecurity is not solved with a single isolated tool, but with a coherent strategy that combines people, processes and technology.<\/span>
\nIn a context where NIS2, IEC 62443 and pressure on the supply chain are setting the pace, having a practical, locally relevant reference point represents a competitive advantage for Galician industry.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

By Beatriz Gonz\u00e1lez, IS Consultant at Inprotech. The publication of AMTEGA’s catalogue of best practices and controls for ICS environments comes at a particularly relevant moment for Galician industry. The combination of greater connectivity, IT\/OT convergence and new regulatory requirements is raising the level of exposure for factories, critical infrastructure and essential services. The great…<\/p>\n","protected":false},"author":1,"featured_media":3207,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[17],"tags":[],"class_list":["post-3208","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-techpapers-en"],"acf":[],"yoast_head":"\nIndustrial cybersecurity in Galicia: from regulation to real-world operation - InprOTech<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/inprotech.es\/en\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Industrial cybersecurity in Galicia: from regulation to real-world operation - InprOTech\" \/>\n<meta property=\"og:description\" content=\"By Beatriz Gonz\u00e1lez, IS Consultant at Inprotech. The publication of AMTEGA’s catalogue of best practices and controls for ICS environments comes at a particularly relevant moment for Galician industry. The combination of greater connectivity, IT\/OT convergence and new regulatory requirements is raising the level of exposure for factories, critical infrastructure and essential services. The great...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/inprotech.es\/en\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\/\" \/>\n<meta property=\"og:site_name\" content=\"InprOTech\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-01T08:07:20+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/inprotech.es\/wp-content\/uploads\/2026\/07\/Ciberseguridad-industrial-en-Galicia-de-la-norma-a-la-operacion-real.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/inprotech.es\\\/en\\\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/inprotech.es\\\/en\\\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\\\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/inprotech.es\\\/#\\\/schema\\\/person\\\/cb0ae1292b18b48c1e89b0e4e7ef15d9\"},\"headline\":\"Industrial cybersecurity in Galicia: from regulation to real-world operation\",\"datePublished\":\"2026-07-01T08:07:20+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/inprotech.es\\\/en\\\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\\\/\"},\"wordCount\":435,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/inprotech.es\\\/en\\\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/inprotech.es\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Ciberseguridad-industrial-en-Galicia-de-la-norma-a-la-operacion-real.jpg\",\"articleSection\":[\"Techpapers\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/inprotech.es\\\/en\\\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/inprotech.es\\\/en\\\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\\\/\",\"url\":\"https:\\\/\\\/inprotech.es\\\/en\\\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\\\/\",\"name\":\"Industrial cybersecurity in Galicia: from regulation to real-world operation - InprOTech\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/inprotech.es\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/inprotech.es\\\/en\\\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/inprotech.es\\\/en\\\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/inprotech.es\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Ciberseguridad-industrial-en-Galicia-de-la-norma-a-la-operacion-real.jpg\",\"datePublished\":\"2026-07-01T08:07:20+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/inprotech.es\\\/#\\\/schema\\\/person\\\/cb0ae1292b18b48c1e89b0e4e7ef15d9\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/inprotech.es\\\/en\\\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/inprotech.es\\\/en\\\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/inprotech.es\\\/en\\\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\\\/#primaryimage\",\"url\":\"https:\\\/\\\/inprotech.es\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Ciberseguridad-industrial-en-Galicia-de-la-norma-a-la-operacion-real.jpg\",\"contentUrl\":\"https:\\\/\\\/inprotech.es\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Ciberseguridad-industrial-en-Galicia-de-la-norma-a-la-operacion-real.jpg\",\"width\":1200,\"height\":630},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/inprotech.es\\\/en\\\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/inprotech.es\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Industrial cybersecurity in Galicia: from regulation to real-world operation\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/inprotech.es\\\/#website\",\"url\":\"https:\\\/\\\/inprotech.es\\\/\",\"name\":\"InprOTech\",\"description\":\"The Cybersecurity Solution for the Industrial Environment\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/inprotech.es\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/inprotech.es\\\/#\\\/schema\\\/person\\\/cb0ae1292b18b48c1e89b0e4e7ef15d9\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d903daf71b546605502fd9841b9dc598cc8d3a04ee26680ca18eb3633e5209be?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d903daf71b546605502fd9841b9dc598cc8d3a04ee26680ca18eb3633e5209be?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d903daf71b546605502fd9841b9dc598cc8d3a04ee26680ca18eb3633e5209be?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\\\/\\\/inprotech.es\"],\"url\":\"https:\\\/\\\/inprotech.es\\\/en\\\/author\\\/moon\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Industrial cybersecurity in Galicia: from regulation to real-world operation - InprOTech","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/inprotech.es\/en\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\/","og_locale":"en_US","og_type":"article","og_title":"Industrial cybersecurity in Galicia: from regulation to real-world operation - InprOTech","og_description":"By Beatriz Gonz\u00e1lez, IS Consultant at Inprotech. The publication of AMTEGA’s catalogue of best practices and controls for ICS environments comes at a particularly relevant moment for Galician industry. The combination of greater connectivity, IT\/OT convergence and new regulatory requirements is raising the level of exposure for factories, critical infrastructure and essential services. The great...","og_url":"https:\/\/inprotech.es\/en\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\/","og_site_name":"InprOTech","article_published_time":"2026-07-01T08:07:20+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/inprotech.es\/wp-content\/uploads\/2026\/07\/Ciberseguridad-industrial-en-Galicia-de-la-norma-a-la-operacion-real.jpg","type":"image\/jpeg"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/inprotech.es\/en\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\/#article","isPartOf":{"@id":"https:\/\/inprotech.es\/en\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\/"},"author":{"name":"admin","@id":"https:\/\/inprotech.es\/#\/schema\/person\/cb0ae1292b18b48c1e89b0e4e7ef15d9"},"headline":"Industrial cybersecurity in Galicia: from regulation to real-world operation","datePublished":"2026-07-01T08:07:20+00:00","mainEntityOfPage":{"@id":"https:\/\/inprotech.es\/en\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\/"},"wordCount":435,"commentCount":0,"image":{"@id":"https:\/\/inprotech.es\/en\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\/#primaryimage"},"thumbnailUrl":"https:\/\/inprotech.es\/wp-content\/uploads\/2026\/07\/Ciberseguridad-industrial-en-Galicia-de-la-norma-a-la-operacion-real.jpg","articleSection":["Techpapers"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/inprotech.es\/en\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/inprotech.es\/en\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\/","url":"https:\/\/inprotech.es\/en\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\/","name":"Industrial cybersecurity in Galicia: from regulation to real-world operation - InprOTech","isPartOf":{"@id":"https:\/\/inprotech.es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/inprotech.es\/en\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\/#primaryimage"},"image":{"@id":"https:\/\/inprotech.es\/en\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\/#primaryimage"},"thumbnailUrl":"https:\/\/inprotech.es\/wp-content\/uploads\/2026\/07\/Ciberseguridad-industrial-en-Galicia-de-la-norma-a-la-operacion-real.jpg","datePublished":"2026-07-01T08:07:20+00:00","author":{"@id":"https:\/\/inprotech.es\/#\/schema\/person\/cb0ae1292b18b48c1e89b0e4e7ef15d9"},"breadcrumb":{"@id":"https:\/\/inprotech.es\/en\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/inprotech.es\/en\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/inprotech.es\/en\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\/#primaryimage","url":"https:\/\/inprotech.es\/wp-content\/uploads\/2026\/07\/Ciberseguridad-industrial-en-Galicia-de-la-norma-a-la-operacion-real.jpg","contentUrl":"https:\/\/inprotech.es\/wp-content\/uploads\/2026\/07\/Ciberseguridad-industrial-en-Galicia-de-la-norma-a-la-operacion-real.jpg","width":1200,"height":630},{"@type":"BreadcrumbList","@id":"https:\/\/inprotech.es\/en\/industrial-cybersecurity-in-galicia-from-regulation-to-real-world-operation\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/inprotech.es\/en\/"},{"@type":"ListItem","position":2,"name":"Industrial cybersecurity in Galicia: from regulation to real-world operation"}]},{"@type":"WebSite","@id":"https:\/\/inprotech.es\/#website","url":"https:\/\/inprotech.es\/","name":"InprOTech","description":"The Cybersecurity Solution for the Industrial Environment","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/inprotech.es\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/inprotech.es\/#\/schema\/person\/cb0ae1292b18b48c1e89b0e4e7ef15d9","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/d903daf71b546605502fd9841b9dc598cc8d3a04ee26680ca18eb3633e5209be?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d903daf71b546605502fd9841b9dc598cc8d3a04ee26680ca18eb3633e5209be?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d903daf71b546605502fd9841b9dc598cc8d3a04ee26680ca18eb3633e5209be?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/inprotech.es"],"url":"https:\/\/inprotech.es\/en\/author\/moon\/"}]}},"_links":{"self":[{"href":"https:\/\/inprotech.es\/en\/wp-json\/wp\/v2\/posts\/3208","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/inprotech.es\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/inprotech.es\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/inprotech.es\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/inprotech.es\/en\/wp-json\/wp\/v2\/comments?post=3208"}],"version-history":[{"count":1,"href":"https:\/\/inprotech.es\/en\/wp-json\/wp\/v2\/posts\/3208\/revisions"}],"predecessor-version":[{"id":3209,"href":"https:\/\/inprotech.es\/en\/wp-json\/wp\/v2\/posts\/3208\/revisions\/3209"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/inprotech.es\/en\/wp-json\/wp\/v2\/media\/3207"}],"wp:attachment":[{"href":"https:\/\/inprotech.es\/en\/wp-json\/wp\/v2\/media?parent=3208"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/inprotech.es\/en\/wp-json\/wp\/v2\/categories?post=3208"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/inprotech.es\/en\/wp-json\/wp\/v2\/tags?post=3208"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}