Cybersecurity in Catalonia

A well-rounded ecosystem 

In terms of business segment, the vast majority of companies operate in the protection space (90.3%), meaning they implement measures to prevent and mitigate cyber threats and attacks. This is followed by identification services (62.5%), which involve recognizing and authenticating users and devices attempting to access systems or data; early detection (41.8%) of malicious or anomalous activity within a system or network; incident response (35.5%) to address threats or attacks; and recovery (23%) to restore systems, data, or services affected by cyber incidents.

In terms of the technologies used, 42.7% of companies are developing solutions related to artificial intelligence. The report also highlights the role of quantum technologies, with 4.8% of companies operating here; an emerging field where initiatives are underway to integrate these technologies in order to enhance the security of data and communications.

According to the study, Catalonia’s cybersecurity ecosystem is rounded out by the presence of technology centers and research institutes, universities offering undergraduate, master’s, and vocational training programs in the field, as well as associations and events focused on cybersecurity. The ecosystem is also supported by initiatives from public institutions and government bodies. Notable highlights include the Barcelona Cybersecurity Congress, which brings together leading international stakeholders in the sector in the Catalan capital. Other key players include the DIH4CAT network, which focuses on testing and experimenting with advanced technologies; the Digital Catalonia Alliance, which brings together various emerging technologies across the region; and ASCICAT, the non-profit association formed by companies across the sector’s entire value chain, among others.
 

Global cybersecurity trends and applications

From a trends perspective, the report notes that global revenue in the cybersecurity sector is expected to grow at an annual rate of 8% over the next five years, reaching $272 billion. The United States clearly lead the market, followed by Europe and Asia in second and third place, respectively.

The financial services sector, public administration, and healthcare are the main drivers of demand for cybersecurity services. Over the past five years, foreign direct investment (FDI) in cybersecurity has totaled €41 billion, while cybersecurity startups have raised $11 billion in venture capital funding.

In this context, the global economic cost of cybercrime in 2024 is estimated at €9.5 trillion. In fact, ransomware attacks increased by 11% worldwide over the past year. In Spain, cybersecurity incidents rose by 15% in 2024 compared to the previous year.

The report also highlights that quantum technologies—a set of emerging technologies based on the principles of quantum mechanics—are expected to play a significant role in cybersecurity. While they may pose a threat to current data encryption methods, they also hold strong potential to enhance cybersecurity, particularly in the areas of cryptography, communications, and threat detection.

Among the main challenges identified in the sector, the study highlights the need for specialized cybersecurity talent. According to ISC, the global number of professionals in the field has remained stable, while the gap between available job openings and qualified talent stands at 19%. In Catalonia, as in the rest of Europe, this gap is estimated to have widened by 12.8%, with an unmet demand for around 13,500 professionals. In response, the report notes the availability of 62 vocational training courses in cybersecurity offered across 45 centers in Catalonia, along with 14 undergraduate, master’s, and postgraduate programs at Catalan universities.

The study also notes that, at the European level, eleven highly critical essential sectors have been identified as emerging areas of demand for cybersecurity products and services. These include energy, transport, banking, financial market infrastructure, healthcare, drinking water, wastewater, digital infrastructure, ICT service management, public administration, and space.