The Cybersecurity Operations Center of the General Administration of the State and its Public Bodies (COCS), foreseen in Measure 9 of the Digitalization Plan of Public Administrations 2021 - 2025, is a shared and centralized service, aimed at providing protection in order to increase the capacity for surveillance and threat detection in the daily operation of information and communications systems, as well as to improve the response capacity to eventual cyberattacks.
Target audience
General State Administration
Usage
Network service infrastructure
Solution Type
Infrastructure or common service
Status of the solution
Production
Organic area
State
Technical area
Security infrastructure and management of identities
The COCS will reinforce, through horizontal cybersecurity services, the capacities for prevention, protection, detection and response to cybersecurity incidents, so that, thanks to optimization and economies of scale, better effectiveness and efficiency can be obtained and serve as a benchmark for other centers.
The Cybersecurity Planning and Coordination Division, dependent on the State agency for Digital Administration (AEAD), will be responsible for the technical and strategic direction of the service. The CCN-CERT provides its cybersecurity operation capacity, cybersecurity tools and solutions.
The COCS holds the certificate of conformity with the National Security Scheme (ENS) for the HIGH Category. This certificate of conformity proves that the COCS meets the requirements established in the ENS and projects trust in the provision of cybersecurity services.
The COCS also holds the certificate of conformity with the Specific Compliance Profile for Managed Security Services( Guía CCN-STIC 896 ), which formally accredits its operational and technical capabilities."
All of the entities that use the Unified Communications Service of the General State Administration are within the scope of the COCS, plus other entities that have a direct connection to an interconnection node of the RedSARA Network.
The COCS will provide prevention, protection, detection and response services to cybersecurity incidents: