When cybersecurity is viewed as an asset, it is placed on the same level as any other type of asset, human or financial, says Jordi Ubach, Head of the National Cybersecurity Agency of Andorra

In an increasingly digitalised world, cybersecurity has become a strategic pillar for ensuring economic competitiveness, technological sovereignty, and public trust. For a country such as Andorra, with a highly interconnected economy and a small territorial scale, the challenges are significant, but so are the opportunities. The proximity between institutions, businesses, and critical infrastructure makes it possible to develop more agile protection models tailored to the needs of the territory. We speak with Jordi Ubach, Head of the National Cybersecurity Agency of Andorra (ANC-AD), about the key challenges the country faces in the field of digital security, the importance of data sovereignty, the role of digital transformation in the business ecosystem, and the national priorities that should shape strategy in the coming years to strengthen Andorra as a trusted digital reference. Interview: Irina Rybalchenko Andorra is a small country, but with a interconnected economy, including finance, tourism, and telecommunications. Does this dimension represent a vulnerability or, on the contrary, an advantage in building a more agile and sovereign national cybersecurity model? The small size of our country is an advantage when building an agile, sovereign, and tailored national cybersecurity model, because critical infrastructures are often unique. This includes, for example, the telecommunications operator and the energy operator. This allows us to design a security model that is highly ad hoc compared to other countries where such infrastructures are much more fragmented. In this sense, the application of cybersecurity measures, and even the mitigation of certain types of vulnerabilities, is relatively easier in countries with a similar scale to Andorra. In a context where data has become a strategic asset, how can Andorra ensure that its digital transformation does not generate a new dependency on foreign-controlled platforms, cloud services, or technologies? One of the key aspects in this regard is ensuring data sovereignty. This means guaranteeing that data is encrypted, that cryptographic keys are in place, and that access is restricted exclusively to the country. Andorra Digital, and more specifically through the Data Intelligence Agency (AID), works to ensure this is possible. In this way, procedures are established to control data ingestion into already managed and fully perimeter-controlled infrastructures, as well as control over data egress. This allows for monitoring and control of data both at entry and exit points. These controls enable us to block access for any unauthorised individual. In many organisations, cybersecurity is still perceived as a technical constraint. How can it be turned into a driver of trust, economic attractiveness, and competitiveness for Andorra? One of our challenges is to transform this technical difficulty into an additional business asset. When cybersecurity is turned into an asset, it is placed on the same level as any other company asset, such as human capital, financial assets, or others. Until companies and institutions truly consider cybersecurity as an asset, we will continue to face obstacles – technical, knowledge-related, resource-based, or financial – which often prevent (or discourage) the implementation of these security measures and the establishment of a proper security perimeter. This is precisely why, together with the Chamber of Commerce and Andorra Business, the Andorra Digital Transformation Programme is being implemented. It allows companies, through a prior assessment, to access subsidies for the development of cross-cutting digital solutions and to support the implementation of measures that enhance business cybersecurity. If Andorra aims to consolidate itself as a sovereign digital hub, what should be the absolute priority over the next two years: developing local talent, protecting critical infrastructure, building a sovereign cloud, strengthening international cooperation, or promoting greater business awareness? It is a combination of all the above. We must develop local talent through formal university-level education programmes, increase resilience, and do so within the existing regulatory frameworks in order to strengthen trust through sovereign cloud initiatives, which are a key project. All of this will contribute to positioning Andorra as an internationally recognised and trusted digital hub. At the same time, it is essential to continue reinforcing international cooperation in cybersecurity, which is already actively being developed both by ANC-AD and Andorra Digital, in order to build strategic alliances with high-level technological institutions and partners. In parallel, it is also crucial to remain agile in adapting to new regulatory frameworks as they emerge. The digital world is constantly evolving, and new regulations will inevitably arise that we will need to adapt to quickly and continuously. In this context, it also requires having the appropriate means and capabilities to adjust to this evolving regulatory landscape. The post When cybersecurity is viewed as an asset, it is placed on the same level as any other type of asset, human or financial, says Jordi Ubach, Head of the National Cybersecurity Agency of Andorra first appeared on All PYRENEES.