PROTISEC — AI-Powered Enterprise Cybersecurity

NIS2 in Spain: What SMEs Need to Do Before August 2026

Tue, 10 Mar 2026 00:00:00 +0000

The EU Network and Information Security Directive (NIS2) entered into force across EU member states in October 2024. Spain transposed it via the Ley de Seguridad de las Redes y Sistemas de Información (LSSI-NIS2). For Spanish SMBs in affected sectors, the clock is running.

Who Is Actually Affected

NIS2 expanded the scope dramatically compared to its predecessor. In Spain, the following sectors are now covered:

Energy (electricity, oil & gas, district heating)
Transport (road, rail, air, maritime)
Banking and financial market infrastructure
Health (hospitals, pharma manufacturing, R&D)
Drinking water and wastewater
Digital infrastructure (DNS, cloud, data centres, CDN providers)
ICT service management (MSPs, MSSPs)
Public administration
Space

The size threshold matters: medium enterprises (50+ employees or €10M+ revenue) in essential sectors fall under NIS2. Some critical entities regardless of size are also in scope. If you are an MSP or MSSP, you are almost certainly in scope.

How LockBit Penetrates ICS/OT Networks: An Anatomy

Thu, 05 Mar 2026 00:00:00 +0000

The Colonial Pipeline attack in 2021 cost $4.4M in ransom and shut down fuel supply to the US East Coast for six days. The compromise vector: a legacy VPN account with no MFA. The attackers never touched OT systems — they did not need to. The company shut down operations proactively out of fear.

This is the new reality of industrial ransomware. The attack does not need to compromise your PLC to be devastating.

Private LLMs vs OpenAI API: The Enterprise Security Case

Sat, 28 Feb 2026 00:00:00 +0000

In 2023, Samsung employees leaked proprietary source code by pasting it into ChatGPT. The incident is now a standard case study in enterprise AI risk. Two years later, most large European companies have an AI usage policy. Very few have an AI architecture that actually enforces it.

The fundamental problem: cloud LLM APIs process your data on infrastructure you do not control, governed by terms of service that change, subject to regulatory jurisdictions that may not align with your compliance obligations.

AI-Augmented Red/Blue Team

Mon, 01 Jan 0001 00:00:00 +0000

AI-Powered Automated Compliance

Mon, 01 Jan 0001 00:00:00 +0000

CISO as a Service / Senior Architect

Mon, 01 Jan 0001 00:00:00 +0000

Cookie Policy

Mon, 01 Jan 0001 00:00:00 +0000

Cookies are small pieces of information sent to and stored on the user’s hard drive by their browser when they connect to a website.

Types of Cookies Used

Technical cookies (strictly necessary)

Enable navigation and the use of the various options or services offered by the website, such as session management and security. No consent required.

Analytics cookies (Google Analytics 4)

Allow anonymous analysis of user behaviour on the website, enabling measurement of activity and improvement of the site. Only activated after explicit consent. IP addresses are anonymised.

ICS/OT Industrial Security

Mon, 01 Jan 0001 00:00:00 +0000

Legal Notice

Mon, 01 Jan 0001 00:00:00 +0000

This website is owned by PROTISEC (hereinafter PROTISEC), operated by Angel Georgiev Sulev, NIE X4157410-E, with registered address at C/Ciutat de Fraga 17, 25003 Lleida, Spain.

For any enquiry or proposal, contact us at (+34) 624 676 696 or info@protisec.com.

This website is governed exclusively by Spanish law, which applies to all users — national and international — who access it.

Access to this website is free of charge and is conditional upon prior reading and full, express acceptance of these General Terms of Use in force at the time of access. By using this portal, its content or services, the USER expressly accepts and submits to these General Terms of Use.

MLSecOps & Adversarial Defense

Mon, 01 Jan 0001 00:00:00 +0000

Privacy Policy

Mon, 01 Jan 0001 00:00:00 +0000

Confidentiality and security are core values of PROTISEC. We are committed to protecting your privacy at all times and to collecting only the information strictly necessary.

1. Data Controller

Controller: Angel Georgiev Sulev (NIE X4157410-E)
Trading as: PROTISEC
Address: C/ Ciutat de Fraga 17, 25003 Lleida, Spain
Email: info@protisec.com
Phone: +34 624 676 696

2. Purposes, Legal Basis and Retention

Contact / information request form

Purpose: To respond to your enquiries and, if you have given consent, to keep you informed about our services and activities.
Legal basis: The user’s consent when submitting the form.
Retention: Until your request has been resolved and, if subscribed to communications, until removal is requested.

Email communications

Purpose: To answer information requests, attend to queries and respond to questions.
Legal basis: The user’s consent when contacting us via email.
Retention: Until your request has been answered, unless a new processing relationship is generated.

Obligation to provide personal data

The personal data requested is necessary to manage your requests and/or provide the services you may contract. If you do not provide it, we will not be able to attend to you correctly.

Private LLMs & B2B AI Agents

Mon, 01 Jan 0001 00:00:00 +0000