Several supermarket chains in France and even blood banks in the country have been targeted by cyberattacks in recent weeks. Geopolitics is no longer just a context for companies, but a factor that directly determines their cybersecurity. In the presentation of the report "Security in Times of Uncertainty" prepared by the ESYS Foundation, its president Carlos López Blanco emphasised the particular danger of this type of cyberattack, “as their aim is not to obtain economic benefit, but to cause as much damage as possible. Furthermore, they often respond to long-term strategies aimed at obtaining sensitive information and achieving strategic objectives.”
Through a system of indicators developed by the ESYS Foundation, the report reflects advances in cybersecurity governance among large Spanish companies, for the first time with a comparison over two years, from 3.0 to 3.25 out of 5, while SMEs rise from 1.0 to 1.61 points.
In the institutional sphere, the Regulatory Maturity and Public Governance Index stands at 2.25 out of 5, compared to 2.4 in the previous edition. This decline reflects the difficulties that persist in the development of the regulatory framework, at a time marked by the pending transposition of the European directives NIS2 and CER.
Furthermore, 64.3% of Spanish organisations acknowledge that the geopolitical situation directly affects their cybersecurity. Attacks on essential infrastructure and the activity of state-linked groups compel companies to review their protection measures, and the risk of relying on shared technological providers adds to this. In fact, 65% of large European companies consider these dependencies their main obstacle to improving resilience, according to the report Global Cybersecurity Outlook 2026, cited in the study.