In an increasingly complex digital landscape, cybersecurity has become a fundamental pillar for businesses, public administrations, and citizens in Spain. The growing frequency and sophistication of cyberattacks is driving various organizations to strengthen their protection strategies, invest in technology, and, above all, in the training of professionals and users.
From major banks like CaixaBank to vocational training centers like Alborada YouFP, as well as local government and law enforcement, the country is deploying a wide range of measures to address digital threats. These actions also include international collaboration and the pursuit of greater technological sovereignty, as noted by privacy experts.
Business strategies: banks and operators are securing their systems
In the financial sector, CaixaBank has consolidated a cybersecurity strategy based on specialized teams operating around the clock and advanced monitoring and detection technologies. The bank uses artificial intelligence to anticipate, test for, and prevent any impact on its resilience, as well as to analyze fraudulent transactions in real time. Furthermore, it has implemented a new agentic Security Operations Center (SOC) model that automates responses to multiple alerts, and a system for detecting vulnerabilities in source code using edge AI models.
Vodafone Spain hosted a delegation of senior officers from the Peruvian Army to share its cybersecurity and cyber defense capabilities. During the visit, organized in conjunction with Nebrija University, company representatives presented their approach to protecting critical infrastructure and managing threats, and toured the Madrid Security Operations Center (SOC), from where incidents affecting enterprise and public sector clients are monitored. Jesús Suso, Director of Vodafone Business, emphasized that cybersecurity is a fundamental element of any country's sovereignty and resilience.
The public administration strengthens the protection of municipalities
In the public sector, the Soria Provincial Council hosted a conference to present the Cybersecurity Operations Center for Local Entities (COCS-EELL), an initiative of the State Agency for Digital Administration (AEAD). This center offers municipalities advanced services such as EDR protection, anti-ransomware solutions, secure browsing, and continuous monitoring, free of charge for participating entities. The measure responds to the increase in cyberattacks against public administrations, one of the most affected sectors, and seeks to establish a uniform baseline for security at the local level.
The Provincial Council of Soria joined the project in November 2025, and its experience has been positive, both in terms of improved protection and specialized technical support. This model of collaboration between administrations is key to addressing an increasingly complex threat environment.
Training: a pending issue and an employment opportunity
Training and awareness are another essential pillar. CaixaBank develops internal and external initiatives to foster a cybersecurity culture among its employees and customers, including newsletters and cyberattack simulations. In the educational sphere, Alborada YouFP, the Vocational Training program of the Alborada School in Alcalá de Henares, held a roundtable discussion on cybersecurity and artificial intelligence. Experts agreed that AI is changing both attack techniques and defenses , and emphasized the need for specialized technology professionals . The school has launched its own Master's program in Cybersecurity, coordinated by Raúl Renales, a leading figure with over 25 years of experience.
In addition, the Catalan Government has promoted practical workshops to train workers and the unemployed in digital skills and cybersecurity, with the aim of reducing the digital divide and preparing the professionals of the future.
Technological sovereignty: the debate on European alternatives
The reliance on US software and platforms is also under scrutiny. Ben van der Burg, a technology expert, warns that tools like Gmail, WhatsApp, and Google Drive operate under legal frameworks that can compromise privacy, such as the US Cloud Act, which allows federal agencies to seize data from US companies anywhere in the world. In contrast, he suggests European alternatives like ProtonMail, Tutanota, Nextcloud, Threema, and Ecosia, which prioritize privacy and are subject only to European regulations, such as the GDPR.
This concern for digital sovereignty is also reflected in CaixaBank's participation in European projects such as VIGILANCE and CYBERAID, focused on protecting critical infrastructure and cyber defense with advanced technologies, including post-quantum security . The bank has been the European bank with the largest participation in innovation consortia since 2018, reinforcing its role in international cooperation.
In short, cybersecurity in Spain is undergoing a transformation and strengthening. Both the private and public sectors are implementing technological, training, and collaborative measures, while awareness of the importance of digital sovereignty is growing among citizens and organizations. The combination of artificial intelligence, training, and international cooperation will be key to responding to the challenges posed by a constantly evolving threat landscape.
