RSA Conference 2024 | Carla Redondo Galbarriatu | INCIBE

Clips
News
More from RSA Conference 2024

Carla Redondo Galbarriatu

Secretary General

INCIBE

Strengthening cyber defenses: How INCIBE is leading through collaboration and investment

Cybersecurity collaboration among stakeholders is critical to effectively address evolving, sophisticated threats and build a resilient ecosystem.In Europe, the INCIBE (the National Institute of Cyber Security of Spain) is dedicated to developing a more secure digital environment for citizens and industry through public policies, awareness, talent development and innovation, Carla Redondo Galbarriatu (pictured), secretary general of INCIBE (Instituto Nacional de Ciberseguridad) explained.INCIBE’s Carla Redondo Galbarriatu talks to theCUBE about cybersecurity collaboration.“We also develop acceleration and incubation programs to boost entrepreneurship,” Redondo Galbarriatu said

play_circle_outline INCIBE: Safeguarding Spain's Cybersecurity Ecosystem, Empowering Citizens and Bolstering Digital Industries

play_circle_outline Collaboration with the European Union and other member states to improve cybersecurity standards

play_circle_outline Funding opportunities for cybersecurity through the European Union's next generation funds

Info

Carla Redondo Galbarriatu | INCIBE

Carla Redondo Galbarriatu

Secretary General INCIBE

search

>> Welcome back to theCUBE's coverage of day three RSA Conference 2024. We're here in Moscone West in San Francisco. Really excited. We have a special guest, Carla Redondo, who is the Secretary General of INCIBE, and we're going to learn all about that. Thank you Carla, so much for coming on theCUBE. It's great to see you.

Carla Redondo Galbarriatu

>> Thank you for having me here. It's a real pleasure to share this time with you.

>> Yeah, the pleasure is ours. INCIBE, tell us about INCIBE.

Carla Redondo Galbarriatu

>> Well, INCIBE is the National Institute of Cybersecurity of Spain and we are dedicated fully as a public institution to develop a more secure digital environment. We are focused on citizens and industry because cybersecurity in Spain is divided between public sector, which is in order of other institution and the Ministry of Defense. So we are for the public and the industry.

>> INCIBE is an oversight agency, regulation? Is it more an accelerator? What's the real role of INCIBE day-to-day?

Carla Redondo Galbarriatu

>> What we do in INCIBE is to develop under the Ministry of Digital Transformation and Public Service to develop the public policies to create a more cyber secure digital environment. What we do is we are the for the industry and the citizens. We are really looking to raise awareness and the talent during the citizens. We also develop acceleration and incubation programs to boost entrepreneurship. We also are looking to grow the innovation and digitalization. So we are working so closely with the academy, the universities and the research centers to create more tiers and different workshops on cybersecurity.

>> So the public policy is both things like what, privacy as well as things that organizations should be doing to be safer? Is that correct?

Carla Redondo Galbarriatu

>> Yeah. Yeah, yeah, yeah. That's what we do.

>> So both, okay. Tell me about this NATO project that you have because a lot of the conversation here, Carla, has been not only about digital security, but also about securing critical infrastructure, which sometimes involves physical security. At NATO, I see NATO and Project DIANA, I think you have land, air, space-

Carla Redondo Galbarriatu

>> Yeah, and the cybersecurity is the fifth domain.

>> Yes, right, right.

Carla Redondo Galbarriatu

>> Cyberspace.

>> Si. Right. So tell us more about that project.

Carla Redondo Galbarriatu

>> For INCIBE, collaboration is key. You need to collaborate with all the society and by this I mean all the ecosystems, the company, the academy, and other public institutions and international associations because cybersecurity knows no borders. So you can't work in an isolated mode. You need to work all together, and that's what we do. And we applied ourselves, we did the application to become DIANA NATO's program to become an accelerator, and we were selected. So we are now the accelerator of Spain. And what we do there with the program is to look at the synergies between the cybersecurity and cyber defense industry to boost innovation and develop new services and solutions in cybersecurity that can have this both use, in defense and in the industry.

>> What's your relationship with the broader EU of policymakers and how do you collaborate with them?

Carla Redondo Galbarriatu

>> We work really, really closely with the European Union. A couple of years ago, the European Union created this cybersecurity space at the European level, and it's built around the Cybersecurity European Center, which is based in Bucharest, and each state member has a cybersecurity center. And INCIBE also is the cybersecurity center of Spain. So we are working with all the 27 state members really closely to create this and raise awareness and innovation and entrepreneurship in cybersecurity. So we gather, actually the director of the center in Bucharest has been here at the RSA and we're working with the colleagues all together to improve cybersecurity standards and requirements.

>> Are there mandates, maybe they're suggestions, but how are organizations able to fund better cybersecurity? It's hard. Sometimes you talk to people here, they spend more, but there may be no more safe because the adversaries are so capable. How are organizations finding the funding climate in Spain?

Carla Redondo Galbarriatu

>> The funding climate? Well, yeah, as you said, the cyber attackers, they are going more sophisticated and more fast and faster than us sometimes. So we need to be really responsive and really quick to adapt every time to these new threats that we face every day. And the funding about which we were talking about the investments. At the European Union level, we have a really good opportunity right now. Because of the pandemic, they created the next generation funds and inside the generation fund there is Component 15, which is focused on cybersecurity. So for example, in INCIBE we got 564 million to invest in cybersecurity, to raise capabilities in cybersecurity. And this is all the public policies we are developing now, the innovation, entrepreneurship, talent, because the talent is a challenge for everyone in cybersecurity and also new products and services. We did the biggest public procurement of innovation in the European Union, and we did it from INCIBE. So we are working closely with the industry to develop these new solutions. We're working with the academy to develop this new tiers and investigation and research in cybersecurity. We are working with the industry to develop more careers, esteemed careers also in cybersecurity. And we're also working with the citizens because we're focusing also on the citizens.

>> You mentioned talent, and I'm curious as to how young people think about cybersecurity, what INCIBE is doing to get young people into the industry 'cause there aren't enough skilled people. Any CISO will tell you there's a skills gap, lack of talent. So how are you helping foster talent?

Carla Redondo Galbarriatu

>> Just the data for you to know, the European Commission has a report that says that 58% of the companies have difficulties on hiring and finding people, and not it's only a challenge to attract talent to cybersecurity, but to retain them because there is a huge competitivity between the companies. It doesn't matter if you're a public one or a private one, we're stealing talent and professionals from each other. So what can we do? First of all, raise the number of professionals that we have dedicated to cybersecurity. We are doing a lot of courses of 250 hours to create more professionals, you need to raise the number of professionals. Then, you need to sprinkle the aim, the motivation to study and esteemed career in cybersecurity. So we are going to the universities, we're going to the institutes, like the lowest level of education when they're six, seven years to play with them and to teach them about cybersecurity and to attract them to this sector by gamification. It is a game that you are raising awareness and attracting talent. And also we are working with the universities to create a specific bachelor's degree in cybersecurity, not informatics engineering or industrial engineering, no, cybersecurity engineer. So they're coming to us. We have a huge program of internship in INCIBE.

>> I love it. You get them in the cradle.

Carla Redondo Galbarriatu

>> Since very early ages too.

>> I asked you about the EU alignment. Are you doing anything with the US government?

Carla Redondo Galbarriatu

>> With the US government? Not yet, but we're-

>> You'd like to?

Carla Redondo Galbarriatu

>> Yeah. US is the first market of cybersecurity of the world. So of course, we are also a very high leader in cybersecurity of Spain. Actually, we are the second country in the number of , just behind the US. We have actually 89 . So we have a very mature cybersecurity industry. And of course, we're looking always to the US. That's why we are here at the RSA and we talked actually with a lot of states. We are talking with Kansas, Maryland, Texas. Yeah, we've been talking with them.

>> Ah, Bottoms up.

Carla Redondo Galbarriatu

>> Yeah, so the next level is Washington.

>> If you could structure a collaboration with the US government, what would be your ideal framework? What would that look like?

Carla Redondo Galbarriatu

>> Well, in cybersecurity, what you need to do is to share information and knowledge because we all share the same challenges. We all face the same attacks. What we need to do is to share information, knowledge, and experiences.

>> Right.

Carla Redondo Galbarriatu

>> That's what I took.

>> So that should be easy to make happen, but of course-

Carla Redondo Galbarriatu

>> Should be, yeah.

>> Of course, it's never easy. How are you finding the show? What have you seen? How have you spent your time here?

Carla Redondo Galbarriatu

>> For INCIBE, it is the eighth year coming to the RSA. For me, it's my first. The first year INCIBE was here, we came with four companies only. Nowadays, we have the second-biggest pavilion of the RSA. We are, yeah-

>> Really? Where Is it? Where is...

Carla Redondo Galbarriatu

>> In the south, South Pavilion. Yeah.

>> South, okay.

Carla Redondo Galbarriatu

>> You're invited to come later to meet with us. So it's the second-biggest one.

>> I'll come by for tapas.

Carla Redondo Galbarriatu

>> Well, yeah, sure. We have tortilla and everything for you. And we have a delegation of 26 companies now.

>> Really?

Carla Redondo Galbarriatu

>> Yeah, yeah.

>> What kind of companies? Give us a sense of what are they?

Carla Redondo Galbarriatu

>> Cybersecurity, like a specific product, we have some of them with the detective alert, the cryptography, the identity because you know the European regulation is focusing a lot in the AIDA, the AIDA Act is focusing in identity and the digital sovereignty. So we have a lot of companies focusing on this new criteria that the European legislation is asking. So cryptography, quantum technologies, IA, everything. It's really interesting.

>> You know Silicon Valley? Of course, it's famous, it's the hotbed of innovation in the United States and even the world. Where is the locus of innovation in Spain? Is it Madrid? Is it dispersed all over the country?

Carla Redondo Galbarriatu

>> Well, of course, Madrid, but Barcelona are the most settled hub that we have in Spain. But don't forget that there are other hubs that are racing. For example, we need to talk about Malaga. Malaga is in the south of Spain and is doing a great work to create an ecosystem and strong ecosystem on cybersecurity. Actually, Google has chosen Malaga to be the base of their Security Excellence Center, the GSEC Center. So in the whole Europe, they came to Spain to be based, and we were talking yesterday with Google, and it's just growing. So there is an important international bet for Spain and the hubs and the industry is growing. We are growing, the cybersecurity industry is growing around 10% per year, and this is going to go up and higher and higher.

>> Thank you so much for sharing-

Carla Redondo Galbarriatu

>> Thank you....

>> Your story with us. INCIBE, will you be at Black Hat as well?

Carla Redondo Galbarriatu

>> Yeah.

>> Yeah?

Carla Redondo Galbarriatu

>> We hope we'll be there. Las Vegas, right?

>> Maybe you'll be there, maybe we were talking off camera. And of course, you're growing your presence at RSA. Will you come back?

Carla Redondo Galbarriatu

>> Sure.

>> Yeah?

Carla Redondo Galbarriatu

>> Sure, yeah. I would love it.

>> Okay. Well, great to have you. Thank you so much.

Carla Redondo Galbarriatu

>> Thank you.

>> Appreciate your time.

Carla Redondo Galbarriatu

>> Thank you for your time.

>> All right. Keep it right there. We'll be right back with our next guest after this short break. You're watching theCUBE from RSAC 2024.

Carla Redondo Galbarriatu | INCIBE

search

>> Welcome back to theCUBE's coverage of day three RSA Conference 2024. We're here in Moscone West in San Francisco. Really excited. We have a special guest, Carla Redondo, who is the Secretary General of INCIBE, and we're going to learn all about that. Thank you Carla, so much for coming on theCUBE. It's great to see you.

Carla Redondo Galbarriatu

>> Thank you for having me here. It's a real pleasure to share this time with you.

>> Yeah, the pleasure is ours. INCIBE, tell us about INCIBE.

Carla Redondo Galbarriatu

>> Well, INCIBE is the National Institute of Cybersecurity of Spain and we are dedicated fully as a public institution to develop a more secure digital environment. We are focused on citizens and industry because cybersecurity in Spain is divided between public sector, which is in order of other institution and the Ministry of Defense. So we are for the public and the industry.

>> INCIBE is an oversight agency, regulation? Is it more an accelerator? What's the real role of INCIBE day-to-day?

Carla Redondo Galbarriatu

>> What we do in INCIBE is to develop under the Ministry of Digital Transformation and Public Service to develop the public policies to create a more cyber secure digital environment. What we do is we are the for the industry and the citizens. We are really looking to raise awareness and the talent during the citizens. We also develop acceleration and incubation programs to boost entrepreneurship. We also are looking to grow the innovation and digitalization. So we are working so closely with the academy, the universities and the research centers to create more tiers and different workshops on cybersecurity.

>> So the public policy is both things like what, privacy as well as things that organizations should be doing to be safer? Is that correct?

Carla Redondo Galbarriatu

>> Yeah. Yeah, yeah, yeah. That's what we do.

>> So both, okay. Tell me about this NATO project that you have because a lot of the conversation here, Carla, has been not only about digital security, but also about securing critical infrastructure, which sometimes involves physical security. At NATO, I see NATO and Project DIANA, I think you have land, air, space-

Carla Redondo Galbarriatu

>> Yeah, and the cybersecurity is the fifth domain.

>> Yes, right, right.

Carla Redondo Galbarriatu

>> Cyberspace.

>> Si. Right. So tell us more about that project.

Carla Redondo Galbarriatu

>> For INCIBE, collaboration is key. You need to collaborate with all the society and by this I mean all the ecosystems, the company, the academy, and other public institutions and international associations because cybersecurity knows no borders. So you can't work in an isolated mode. You need to work all together, and that's what we do. And we applied ourselves, we did the application to become DIANA NATO's program to become an accelerator, and we were selected. So we are now the accelerator of Spain. And what we do there with the program is to look at the synergies between the cybersecurity and cyber defense industry to boost innovation and develop new services and solutions in cybersecurity that can have this both use, in defense and in the industry.

>> What's your relationship with the broader EU of policymakers and how do you collaborate with them?

Carla Redondo Galbarriatu

>> We work really, really closely with the European Union. A couple of years ago, the European Union created this cybersecurity space at the European level, and it's built around the Cybersecurity European Center, which is based in Bucharest, and each state member has a cybersecurity center. And INCIBE also is the cybersecurity center of Spain. So we are working with all the 27 state members really closely to create this and raise awareness and innovation and entrepreneurship in cybersecurity. So we gather, actually the director of the center in Bucharest has been here at the RSA and we're working with the colleagues all together to improve cybersecurity standards and requirements.

>> Are there mandates, maybe they're suggestions, but how are organizations able to fund better cybersecurity? It's hard. Sometimes you talk to people here, they spend more, but there may be no more safe because the adversaries are so capable. How are organizations finding the funding climate in Spain?

Carla Redondo Galbarriatu

>> The funding climate? Well, yeah, as you said, the cyber attackers, they are going more sophisticated and more fast and faster than us sometimes. So we need to be really responsive and really quick to adapt every time to these new threats that we face every day. And the funding about which we were talking about the investments. At the European Union level, we have a really good opportunity right now. Because of the pandemic, they created the next generation funds and inside the generation fund there is Component 15, which is focused on cybersecurity. So for example, in INCIBE we got 564 million to invest in cybersecurity, to raise capabilities in cybersecurity. And this is all the public policies we are developing now, the innovation, entrepreneurship, talent, because the talent is a challenge for everyone in cybersecurity and also new products and services. We did the biggest public procurement of innovation in the European Union, and we did it from INCIBE. So we are working closely with the industry to develop these new solutions. We're working with the academy to develop this new tiers and investigation and research in cybersecurity. We are working with the industry to develop more careers, esteemed careers also in cybersecurity. And we're also working with the citizens because we're focusing also on the citizens.

>> You mentioned talent, and I'm curious as to how young people think about cybersecurity, what INCIBE is doing to get young people into the industry 'cause there aren't enough skilled people. Any CISO will tell you there's a skills gap, lack of talent. So how are you helping foster talent?

Carla Redondo Galbarriatu

>> Just the data for you to know, the European Commission has a report that says that 58% of the companies have difficulties on hiring and finding people, and not it's only a challenge to attract talent to cybersecurity, but to retain them because there is a huge competitivity between the companies. It doesn't matter if you're a public one or a private one, we're stealing talent and professionals from each other. So what can we do? First of all, raise the number of professionals that we have dedicated to cybersecurity. We are doing a lot of courses of 250 hours to create more professionals, you need to raise the number of professionals. Then, you need to sprinkle the aim, the motivation to study and esteemed career in cybersecurity. So we are going to the universities, we're going to the institutes, like the lowest level of education when they're six, seven years to play with them and to teach them about cybersecurity and to attract them to this sector by gamification. It is a game that you are raising awareness and attracting talent. And also we are working with the universities to create a specific bachelor's degree in cybersecurity, not informatics engineering or industrial engineering, no, cybersecurity engineer. So they're coming to us. We have a huge program of internship in INCIBE.

>> I love it. You get them in the cradle.

Carla Redondo Galbarriatu

>> Since very early ages too.

>> I asked you about the EU alignment. Are you doing anything with the US government?

Carla Redondo Galbarriatu

>> With the US government? Not yet, but we're-

>> You'd like to?

Carla Redondo Galbarriatu

>> Yeah. US is the first market of cybersecurity of the world. So of course, we are also a very high leader in cybersecurity of Spain. Actually, we are the second country in the number of , just behind the US. We have actually 89 . So we have a very mature cybersecurity industry. And of course, we're looking always to the US. That's why we are here at the RSA and we talked actually with a lot of states. We are talking with Kansas, Maryland, Texas. Yeah, we've been talking with them.

>> Ah, Bottoms up.

Carla Redondo Galbarriatu

>> Yeah, so the next level is Washington.

>> If you could structure a collaboration with the US government, what would be your ideal framework? What would that look like?

Carla Redondo Galbarriatu

>> Well, in cybersecurity, what you need to do is to share information and knowledge because we all share the same challenges. We all face the same attacks. What we need to do is to share information, knowledge, and experiences.

>> Right.

Carla Redondo Galbarriatu

>> That's what I took.

>> So that should be easy to make happen, but of course-

Carla Redondo Galbarriatu

>> Should be, yeah.

>> Of course, it's never easy. How are you finding the show? What have you seen? How have you spent your time here?

Carla Redondo Galbarriatu

>> For INCIBE, it is the eighth year coming to the RSA. For me, it's my first. The first year INCIBE was here, we came with four companies only. Nowadays, we have the second-biggest pavilion of the RSA. We are, yeah-

>> Really? Where Is it? Where is...

Carla Redondo Galbarriatu

>> In the south, South Pavilion. Yeah.

>> South, okay.

Carla Redondo Galbarriatu

>> You're invited to come later to meet with us. So it's the second-biggest one.

>> I'll come by for tapas.

Carla Redondo Galbarriatu

>> Well, yeah, sure. We have tortilla and everything for you. And we have a delegation of 26 companies now.

>> Really?

Carla Redondo Galbarriatu

>> Yeah, yeah.

>> What kind of companies? Give us a sense of what are they?

Carla Redondo Galbarriatu

>> Cybersecurity, like a specific product, we have some of them with the detective alert, the cryptography, the identity because you know the European regulation is focusing a lot in the AIDA, the AIDA Act is focusing in identity and the digital sovereignty. So we have a lot of companies focusing on this new criteria that the European legislation is asking. So cryptography, quantum technologies, IA, everything. It's really interesting.

>> You know Silicon Valley? Of course, it's famous, it's the hotbed of innovation in the United States and even the world. Where is the locus of innovation in Spain? Is it Madrid? Is it dispersed all over the country?

Carla Redondo Galbarriatu

>> Well, of course, Madrid, but Barcelona are the most settled hub that we have in Spain. But don't forget that there are other hubs that are racing. For example, we need to talk about Malaga. Malaga is in the south of Spain and is doing a great work to create an ecosystem and strong ecosystem on cybersecurity. Actually, Google has chosen Malaga to be the base of their Security Excellence Center, the GSEC Center. So in the whole Europe, they came to Spain to be based, and we were talking yesterday with Google, and it's just growing. So there is an important international bet for Spain and the hubs and the industry is growing. We are growing, the cybersecurity industry is growing around 10% per year, and this is going to go up and higher and higher.

>> Thank you so much for sharing-

Carla Redondo Galbarriatu

>> Thank you....

>> Your story with us. INCIBE, will you be at Black Hat as well?

Carla Redondo Galbarriatu

>> Yeah.

>> Yeah?

Carla Redondo Galbarriatu

>> We hope we'll be there. Las Vegas, right?

>> Maybe you'll be there, maybe we were talking off camera. And of course, you're growing your presence at RSA. Will you come back?

Carla Redondo Galbarriatu

>> Sure.

>> Yeah?

Carla Redondo Galbarriatu

>> Sure, yeah. I would love it.

>> Okay. Well, great to have you. Thank you so much.

Carla Redondo Galbarriatu

>> Thank you.

>> Appreciate your time.

Carla Redondo Galbarriatu

>> Thank you for your time.

>> All right. Keep it right there. We'll be right back with our next guest after this short break. You're watching theCUBE from RSAC 2024.