Cybersecurity Asesor Digital (an officially registered Kit Consulting advisor)
What is Kit Digital (the Spanish government's digitalisation grant programme)?
Kit Consulting (the Spanish government’s digital advisory grant programme) is a grant programme aimed at SMEs and intended for engaging specialised, personalised digital advisory services for their businesses.
It is a grant programme of the Spanish Government, managed by Red.es (the Spanish public body for digitalisation), an entity attached to the Ministerio para la Transformación Digital y de la Función Pública (Spain’s Ministry for Digital Transformation and the Civil Service) through the State Secretariat for Digitalisation and Artificial Intelligence, whose aim is for SMEs with between 10 and fewer than 250 employees to take a further step along the path of their digitalisation. A project backed by 300 million euros coming from the NextGeneration EU funds.
Specialised and personalised digital advisory voucher
With the advisory services, SMEs will obtain a roadmap to advance the digitalisation of their business so that they make the leap from digital transition to digital transformation.
What solutions do we offer you?
Cybersecurity Advisory Service (Basic)The main aim of this service is to provide you with a basic cybersecurity plan tailored to the specific needs of your SME, as well as to deliver a tailored use case. The goal is to apply the basic documentation of your Information Security Management System (ISMS) in line with ISO 27001 and ENS (medium-high category)
Type of advisory service
The Kit Consulting Cybersecurity Advisory Service (Basic) falls under the Basic advisory type.
Activities
The registered Asesor Digital will be responsible for carrying out a series of activities to ensure your basic cybersecurity plan is developed correctly; the service delivered will allow you to:
- Understand your SME’s current situation with regard to risks, identifying the assets and data most valuable to your activity.
- Ensure your SME’s continuity in the face of possible security incidents, minimising the risk of interruptions to business activity.
- Draw up and provide a detailed response plan for security breaches, defining specific protocols and actions in the event of a cyberattack.
- Define and establish, together with you, a personalised short- and medium-term cybersecurity strategy.
- Comply with the security regulations and standards relating to data protection and information security.
- Prepare the basic documentation for implementing an ISMS (ISO 27001 and ENS medium-high) for a core service offered to customers or to public administrations.
- Develop and run a use case tailored to your SME using the appropriate techniques in the field of cybersecurity.
- Identify the opportunities or possible uses of AI in the field of cybersecurity.
Grant amount
- 10 < 50 employees: 6.000€
- 50 < 100 employees: 6.000€
- 100 < 250 employees: 6.000€
To report on the service provided, the corresponding technical documentation and the results obtained must be submitted, in accordance with the provisions of Article 31.6a) of this order.
Other Information of Interest
Services and products delivered outside the grant package will be quoted separately in accordance with our distribution and service rates and prices.
Type of advisory service
The Kit Consulting Cybersecurity Advisory Service (Basic) falls under the Basic advisory type.
Activities
The registered Asesor Digital will be responsible for carrying out a series of activities to ensure your basic cybersecurity plan is developed correctly; the service delivered will allow you to:
- Understand your SME’s current situation with regard to risks, identifying the assets and data most valuable to your activity.
- Ensure your SME’s continuity in the face of possible security incidents, minimising the risk of interruptions to business activity.
- Draw up and provide a detailed response plan for security breaches, defining specific protocols and actions in the event of a cyberattack.
- Define and establish, together with you, a personalised short- and medium-term cybersecurity strategy.
- Comply with the security regulations and standards relating to data protection and information security.
- Prepare the basic documentation for implementing an ISMS (ISO 27001 and ENS medium-high) for a core service offered to customers or to public administrations.
- Develop and run a use case tailored to your SME using the appropriate techniques in the field of cybersecurity.
- Identify the opportunities or possible uses of AI in the field of cybersecurity.
Grant amount
- 10 < 50 employees: 6.000€
- 50 < 100 employees: 6.000€
- 100 < 250 employees: 6.000€
To report on the service provided, the corresponding technical documentation and the results obtained must be submitted, in accordance with the provisions of Article 31.6a) of this order.
Other Information of Interest
Cybersecurity Advisory (Advanced)
Activities
We will carry out a series of activities to ensure your advanced cybersecurity plan is developed correctly. The service delivered will allow you to:
- Analyse and run penetration tests and analysis of possible vulnerabilities in your SME, taking into account the technological and operational environment in which you operate.
- Implement cybersecurity procedures and tools for the day-to-day management of your SME. This way you will be able to prevent threats, detect them and respond to them.
- Proactively protect your SME against attacks targeting data, improving resilience and response capability in the face of threats.
- Raise your employees’ awareness of the importance of cybersecurity and foster an organisational culture focused on cybersecurity and risk management.
- Identify opportunities or possible uses of AI in the field of cybersecurity.
- Develop and run a use case tailored to your SME using the appropriate techniques in the field of cybersecurity.
Grant amount
- 10 < 50 employees: 6.000€
- 50 < 100 employees: 6.000€
- 100 < 250 employees: 6.000€
To report on the service provided, the corresponding technical documentation and the results obtained must be submitted, in accordance with the provisions of Article 31.6a) of this order.
Other Information of Interest
Cybersecurity Advisory (Certification Preparation)
If you already have basic security protection, a tailored plan and the basic ISMS documentation structure, the main aim of this service is to help you implement advanced protection systems, taking advantage of the capabilities of artificial intelligence, and to prepare you to submit your ISMS for certification.
Activities
We will carry out a series of activities to ensure your advanced cybersecurity plan is developed correctly. The service delivered will allow you to
- Analyse and run penetration tests and analysis of possible vulnerabilities in your SME, taking into account the technological and operational environment in which you operate.
- Review your cybersecurity policies, plans and procedures, identifying shortcomings and areas for improvement.
- Proactively protect your SME against attacks targeting data, improving resilience and response capability in the face of threats.
- Raise your employees’ awareness of the importance of cybersecurity and foster an organisational culture focused on cybersecurity and risk management.
- Prepare the documentation so that you can submit your ISMS for certification for a core service offered to customers or public administrations (ISO 27001 and ENS medium-high, in line with Guide CCN-STIC 825). Certification not included.
- Develop and run a use case tailored to your SME using the appropriate techniques in the field of cybersecurity.
Grant amount
- 10 < 50 employees: 6.000€
- 50 < 100 employees: 6.000€
- 100 < 250 employees: 6.000€
To report on the service provided, the corresponding technical documentation and the results obtained must be submitted, in accordance with the provisions of Article 31.6a) of this order.
Other Information of Interest
FAQ
Why increase the digital transformation of Spanish companies?
The vast majority of Spanish companies have five employees or fewer. According to 2021 data from the INE (Spain’s National Statistics Institute), out of around 3 million companies, fewer than 27% of them and 21% of the self-employed invested in digitalisation. By digitalising your business you will gain visibility, increase interaction with potential customers and optimise your commercial and financial resources, thereby improving your profits and results.
What is an Agente Digitalizador (an officially registered Kit Digital provider)?
The Agente Digitalizador is a role created by the Spanish Government to help SMEs and the self-employed meet their digitalisation goals.
How much money am I going to receive?
Once you obtain your digital voucher, you will have access to a maximum amount depending on the size of your company.
What eligibility requirements do I need to meet to take part in the Kit Digital programme?
To access the Kit Digital voucher you have to be a small company and comply with the financial and headcount thresholds that define the company categories. You must be registered and have been trading for at least two years. You must not be considered a company in crisis. You must be up to date with your tax and Social Security obligations. You must not be subject to a pending recovery order from the European Commission declaring aid illegal and incompatible with the common market. You must not fall under any of the prohibitions set out in Article 13.2 of Law 38/2003 of 17 November, the General Subsidies Act. You must not exceed the de minimis aid limit (small amounts).