The Council of Ministers approves new measures that expand the National Cybersecurity Plan and address the challenges of artificial intelligence, quantum computing, and the new geopolitical landscape.
The Government of Spain has approved an ambitious cybersecurity and cyber defense package amounting to 1.157 billion euros, aimed at strengthening national capabilities in response to the exponential growth of digital threats. This initiative complements the National Cybersecurity Plan (PNCS), approved in March 2022, and is part of the Industrial and Technological Plan for Security and Defense announced on April 24.
According to the presented data, over 100,000 cyberattacks were recorded in Spain in 2024, with an incident considered “very serious” occurring every third day. Since 2015, attacks have increased by 300%, leading the government to regard this issue as a top strategic priority.
Cybersecurity as a pillar of sovereignty and digital rights
“Spain is a European leader in cybersecurity, and we want to consolidate that leadership with an ambitious, modern vision aligned with our democratic values,” declared the Minister for Digital Transformation and Public Function, Óscar López, during the press conference following the Council of Ministers.
The minister highlighted that, according to the International Telecommunication Union, Spain is the second country in the world with the most cybersecurity centers, following only the United States. “Our duty is to seize the opportunities of the digital revolution with the same commitment we apply to addressing its risks. We want to protect digital rights, ensure economic resilience, and defend the technological sovereignty of the state,” he emphasized.
New threats, new responses
The new package of measures responds to several key factors:
- Expansion of digital infrastructures and connected services.
- Increasing use of disruptive technologies, such as artificial intelligence and quantum computing, which are also being exploited by malicious actors.
- The need to adapt detection, response, and protection systems to an increasingly complex and changing environment.
Main lines of action
The set of measures includes both technical and organizational improvements. Notable actions include:
- Boosting the 5G Security Operations Center (SOC 5G): tasked with overseeing the security of 5G networks and services, collaborating with operators, manufacturers, and administrations.
- Strengthening the cyber resilience of the Public Administration through automated audits of services exposed to the Internet and reinforcement of cross-cutting digital administration systems.
- Integrating advanced artificial intelligence into cyberattack detection systems to enhance the ability to identify threats in real time.
- Reinforcing the national early warning system, especially in the field of cyber defense.
- Coordinating between public and private Cybersecurity Operations Centers (CSIRT) to share information and expedite incident response.
- Encouraging research and talent in cybersecurity through collaborations with universities and scientific institutions.
Budget distribution
The execution of the 1.157 billion euro budget will be shared among several key ministries and agencies:
- Ministry of Defense (CNI-CCN, CESTIC, Joint Command of Cyberspace): 60.4% of the total.
- Ministry of the Interior: 16.34%, aimed at enhancing cyber intelligence capabilities and protecting critical infrastructures.
- Ministry for Digital Transformation and Public Function (including AEAD, Red.es, INCIBE): 22%.
- Department of National Security (DSN): 1.2% of the budget, in coordination with the Presidency of the Government.
A comprehensive strategy for the long term
The measures are conceived as an expansion of the National Cybersecurity Plan but also represent a qualitative leap towards comprehensive defense of the Spanish cyberspace, in a context where attacks aim not only to damage systems but also to undermine democratic institutions, economic processes, and individual rights.
Spain thus establishes itself as one of the European countries most committed to making cybersecurity a state policy, essential for its digital development, economic resilience, and technological sovereignty.
Source: Government of Spain