Andalusia has invested more than €40 million in cybersecurity initiatives through 2026 under its 2022–2026 Andalusian Cybersecurity Strategy. The regional government says the work is intended to strengthen prevention, detection and response to digital threats, as cyberattacks evolve and become increasingly linked to technologies such as artificial intelligence (AI).
A key initiative was the creation of the Andalusia Cybersecurity Centre in Málaga, inaugurated in November 2023. A specialist ecosystem has since been developed around it. One of its main tools is the Security Operations Centre (SOC), which handled 13,539 security incidents in 2025, 21% more than the previous year, and issued more than 1,170 early-warning and digital-monitoring notices and alerts. The SOC currently serves more than 128 entities, including regional government bodies, provincial councils and universities. A €12 million investment is allocated to strengthen its services.
Cybersecurity measures also cover devices used by public-sector professionals. A cyber-incident detection and response solution introduced by the regional government, at a cost of €18 million, has been deployed on nearly 145,700 devices. Andalusia also has 50 declarations or certifications of compliance with Spain’s National Security Framework, covering 109 information systems.
The Ministry of Artificial Intelligence, Digital Development and Public Administration is preparing a new Andalusian Cybersecurity Strategy for 2027–2030. It is designed to address, in particular, attacks enabled by AI and to strengthen protection for essential services such as healthcare, education and emergency response. The strategy is also intended to provide protection tools for Andalusian public administrations and small and medium-sized businesses.
Planned initiatives include establishing an Andalusia Cybersecurity Agency, based in Málaga. It is intended to strengthen protection for residents, businesses and public institutions, promote training and encourage cooperation with local administrations and universities.
The next phase will place particular emphasis on prevention and public awareness, with measures aimed especially at children, older people and vulnerable groups. The Andalusian Cyber Shield will be expanded, and a dedicated cybersecurity information and support service will be launched.
Another area of work is protecting corporate email. In June 2026, the regional government provisioned new technology infrastructure to improve the security of its email system, with an investment of €7.5 million.
The cybersecurity effort also includes businesses and technology organisations. Presented in 2024, the Andalusian Cybersecurity Cluster brings together more than 60 companies and organisations and works on training, certification and awareness. The regional government is also developing initiatives to secure AI projects and Internet of Things devices, particularly in healthcare and smart cities, and plans to complete a laboratory specialising in the security assessment of these products and services.