GDPR, NIS2, DORA, MAGERIT risk analysis, security master plan, incident management and data protection officer. For private companies, Public Administrations and essential-service providers.
Spanish and European cybersecurity regulation has grown massively: RGPD/GDPR (2018), LOPDGDD (2018), Esquema Nacional de Seguridad (2010 with 2022 update), NIS2 (Spanish transposition 2024-25), DORA (2025). Each with its own subjective scope and specific requirements.
My job: help you work out what actually applies, in what order to tackle compliance, which controls are critical and which are cosmetic, and how to evidence them when audit time comes.