S2GRUPO joins EU cyber reserve for Ireland response

S2GRUPO has been selected to join the EU Cybersecurity Reserve, with a response mandate covering Ireland and six other EU member states.

The appointment follows the award of four of the 28 procurement procedures launched under the EU Cyber Solidarity Act, placing the Spanish cybersecurity company among 45 providers chosen for the reserve.

Ireland is one of the countries where S2GRUPO can be called in to respond to large-scale cyber incidents affecting critical infrastructure, essential services and strategic systems. The others are Spain, the Netherlands, Poland, Portugal, Malta and Cyprus.

The reserve is managed by the European Union Agency for Cybersecurity, ENISA, and has a budget of €36 million through the Digital Europe Programme. It is intended to ensure specialist incident response teams can be deployed quickly across borders during high-severity cyber crises.

For Ireland, the arrangement adds another external response option at a time when cybersecurity remains a central concern for operators of energy networks, financial platforms, healthcare systems and public services. The country also plays an important role in Europe's technology sector, with major international technology groups running substantial operations from Dublin and elsewhere.

S2GRUPO already has an office in Dublin, giving it an existing base in a market it may be asked to support. It says it has more than 750 specialist staff, although a company background section puts the figure at more than 700.

Reserve role

The EU Cybersecurity Reserve was created as part of broader efforts to improve coordination between member states when serious incidents exceed national resources or require cross-border action. Under the scheme, approved suppliers are vetted through public procurement procedures and can then be deployed on request.

The selection process covered technical solvency, operational experience, response capacity and alignment with EU requirements on trust and technological sovereignty. By winning four procedures, S2GRUPO secured a relatively broad geographic footprint within the framework compared with many other suppliers on the reserve list.

Its work in the field includes protection of critical infrastructure, IT and OT environments, and industrial systems. The company also cites experience in handling high-criticality incidents and cyber crisis scenarios.

That background is relevant in Ireland, where concerns about the resilience of operational technology have grown as utilities, transport systems and health services become more digitised. Cyber incidents affecting such systems can go beyond data loss and disrupt physical operations.

Company reaction

S2GRUPO described the selection as both recognition of its track record and a commitment to support member states under pressure.

"Being part of the EU Cybersecurity Reserve recognizes the work carried out by S2 Grupo over more than two decades in protecting critical systems and responding to complex cyber incidents. It is also a responsibility: to provide European capabilities that help strengthen the digital resilience of Member States when it is needed most," said Javier Pérez Tejerina, Head of International Revenue, S2GRUPO.

A second executive said the reserve marked an important step in the EU's wider cyber policy and in efforts to build regional response resources.

"The EU Cybersecurity Reserve is a key instrument of the Cyber Solidarity Act and a decisive step toward a more prepared and autonomous Europe in cybersecurity. The fact that S2GRUPO has been selected confirms that it is possible to build strategic capabilities from Europe, with proprietary technology and specialized talent, in the service of Member States," said Rafael Rosell, Chief Revenue Officer, S2GRUPO.

Irish context

Ireland has faced repeated questions over cyber resilience in recent years, particularly in sectors where service disruption can have widespread economic and social effects. For operators of essential services, access to a standing pool of external responders may provide an additional layer of contingency when incidents become too large or too specialised for internal teams alone.

The reserve also sits alongside broader EU measures designed to tighten cyber obligations on essential entities, including the NIS2 framework. In practice, this means greater focus on preparedness, coordinated response and recovery planning across public and private sector networks.

S2GRUPO describes itself as a private, independent Spanish company focused on cybersecurity, cyber defence and cyber intelligence. Founded in 2004, it says it operates in more than 35 countries, with offices including Valencia, Madrid, Seville, Barcelona, San Sebastián, Bogotá, Santiago de Chile, Rotterdam, Dublin and Lisbon.

Within its incident response structure, the company says it has a Rapid Intervention Group for attacks on critical infrastructure, a Digital Forensics & Incident Response team, and a specialist OT team working on industrial environments and control systems in sectors including energy, transport and industry.

The seven-country mandate means the company could be mobilised in a range of national crisis scenarios under ENISA's coordination framework, with Ireland now among the member states where it has a formal role.