On June 16, a group of students from the Master's Degree in Cybersecurity and Critical Infrastructure Management at La Salle-URL visited the Cybersecurity Agency of Catalonia and the Open Administration Consortium of Catalonia.
The Deputy Director of Technology and Services of the AOC, Ruben Cortes, presented the AOC's cybersecurity strategy. The organization opted for a profound transformation based on migration to the public cloud, the reorganization of technology teams and the creation of a specific information security unit.
One of the pillars of this process has been the adoption of the National Security Scheme (ENS) as a technological governance tool. This strategy has allowed defining roles and responsibilities, creating a security committee with management participation and deploying its own security operations center (SOC). According to the AOC, security has become a lever to improve the quality of services and the organization's response capacity.
Looking ahead to 2026, the AOC has set ambitious goals, including obtaining high-level ENS certification for the entire platform, achieving 99,99% service availability and contributing to strengthening the resilience of Catalan administrations.
The second phase of the project focuses on supporting municipalities and organizations with fewer technological resources. The AOC points out that many local administrations still have limited systems, with a shortage of specialized personnel, local infrastructure and shortcomings in areas such as multi-factor authentication, backups or ENS compliance.
