The increasing digitalisation of the industrial environment and the implementation of the NIS2 Directive have made operational resilience and supply chain security strategic priorities for organisations. In this regard, Harineras Villamayor turned to Telefónica Tech to design and implement a comprehensive operational resilience model that would strengthen its ability to prevent, respond to and recover from incidents affecting its critical processes. The project involved the implementation of a comprehensive model for business continuity, incident management and supplier management, complemented by the assessment of critical suppliers and a regular programme of tests and drills, integrating IT and OT environments under a risk-based approach. The company has strengthened its operational resilience, improved its cybersecurity governance and made progress in adapting to NIS2 requirements, ensuring greater protection for its operations and supply chain.

Use case highlights

Operational resilience for an industrial IT and OT environment

We implemented a business continuity model tailored to an industrial environment, covering production processes, IT and OT systems, crisis scenarios, recovery strategies, roles, communications and a regular programme of tests and drills to ensure the continuity of operations.

Coordinated incident response and continuous improvement of response capability

We defined a comprehensive incident management procedure, including roles, responsibilities, classification criteria and response protocols for both IT and OT environments. In addition, a regular testing and drill programme was established to validate the effectiveness of the measures implemented, strengthen coordination between teams and enhance the ability to respond to cybersecurity incidents and crisis situations.

Comprehensive supply chain management in accordance with NIS2

We implemented a risk-based supplier management model that enables the identification of critical suppliers, the assessment of their impact on the business, the establishment of security and continuity requirements, and the monitoring of compliance throughout the entire lifecycle, thereby increasing resilience and reducing the risk associated with critical third parties.

What they say about us

    "Telefónica Tech has been a strategic partner in our transition to NIS2. Their in-depth knowledge of the regulations, combined with a practical, business-focused approach, has enabled us to turn a regulatory requirement into an opportunity to strengthen our governance and our cybersecurity posture. I would recommend their team to any organisation undertaking this process."

    Guillermo Sesé, Head of IT Department, Harineras Villamayor