As a leading global energy company, Repsol operates critical infrastructure in highly complex digital, cloud and industrial environments. With digitalization and innovation driving the company’s growth, ensuring protection against potential cyberthreats while preserving operational continuity presents a core priority of Repsol’s operations.

Central to Repsol’s resilience strategy is continuous training and education for users, its business operations team and its technical team. This prepares the company to minimize the impact of cyberattacks by enhancing response speed and precision. Frequent crisis simulations with business continuity and technical tests are conducted to improve detection and response capabilities while strengthening the resilience of response teams under stress.

Repsol integrates both red-team simulated cyberattack exercises and tabletop decision-making scenarios, sometimes with no prior notice. Employees from all locations participate, and some exercises escalate to the board level. Lessons learned from these exercises lead to continuous improvements, and to strategies and responses being refined.

This comprehensive approach ensures Repsol’s cyber resilience is robust and adaptive, safeguarding its infrastructure and supporting ongoing digital growth by enabling quick and effective responses to cyber incidents.