en.Wedoany.com Reported - Spanish telecom operator Vodafone España has obtained the highest level of certification from the National Cryptologic Center (CCN) within the National SOC Network (Red Nacional de SOC), the Gold level. This certification indicates that Vodafone's operations center is continuously providing monitoring and protection services for enterprise and public administration client systems.
The National SOC Network, promoted and coordinated by the CCN, is a platform connecting public and private cybersecurity operations centers nationwide, enabling near real-time exchange of information on active cyber threats in Spain. When any member detects signs of an attack (such as malicious IP addresses, compromised domains, or harmful files), this information is immediately shared with the rest of the network to block the threat before it spreads. The CCN assigns levels based on each entity's degree of participation, evaluating the quantity, quality, and relevance of the cyber intelligence they provide to the network. The highest level, Gold, is reserved for organizations that make active and sustained contributions to information exchange between the public and private sectors. Vodafone had previously joined the National SOC Network (RNS) at the Silver level, and this upgrade is recognition of its collective defense model. Joining the network also requires meeting strict conditions, including that the center must be certified as a SOC operator under the National Security Framework (Esquema Nacional de Seguridad, ENS), signing a code of ethics and professional conduct for the network, and using official CCN tools for incident reporting and intelligence exchange.
As proof of its monitoring responsibilities, the operator's SOC has managed and eliminated over 20 million digital threats targeting its enterprise client systems in the past 12 months. The current scope of protection horizontally covers the technical infrastructure of thousands of organizations, including assets such as protecting 5.5 million mobile lines. In specific metrics, the SOC intercepted between 6 million and 12 million threats related to malicious websites, which are commonly used to steal employee credentials or infect corporate devices. Meanwhile, key SOC activities include ransomware mitigation, curbing between 150,000 and 300,000 such attacks over the past year, in addition to 800,000 to 1.5 million routine malware detections and 500,000 to 1 million spyware and grayware threats.
These activities are managed through the company's network of cybersecurity centers located in Madrid, Barcelona, and Murcia, leveraging advanced technologies such as automation, machine learning systems, and next-generation SOAR platforms to reduce customer exposure time. In terms of internal protection, the operator's data loss prevention (DLP) tools have prevented between 2 million and 6 million potential incidents related to the leakage of confidential company information. Additionally, the operations center has executed between 1 million and 2 million interceptions targeting unauthorized peripheral devices and storage media attempting to interact with corporate networks.
In April 2026, Vodafone's cybersecurity protection service (Secure Net) reached its highest-ever interception volume on its fixed network, blocking 640 million threats in a single month, 38% higher than the record set in April 2025. The company neutralized nearly 1.9 billion attack attempts between March and June, a concentrated period indicating that large-scale phishing and malware distribution campaigns are occurring in increasingly intense waves. Following the April peak, malicious activity remained high in May (over 500 million interceptions) and June (approximately 350 million), more than double the average monthly levels of 2024.
In terms of service enhancement, the subsidiary has signed a strategic agreement with Dell Technologies aimed at expanding its data center capacity across Spain over the next five years. Through a flexible consumption-based model, this collaboration will enable the telecom company to scale its infrastructure while supporting the rapid growth of digital services in Spain. The partnership will bring greater storage capacity, allowing customers to deploy data-intensive workloads faster and more reliably. Using Dell APEX allows Vodafone to consume infrastructure capacity on demand while reducing initial capital investment. Furthermore, the implementation solution can optimize data center energy efficiency. Dell will provide full lifecycle management of the storage infrastructure, including hardware and software maintenance, monitoring, and updates. With guaranteed service level agreements, Vodafone Spain will be able to ensure high availability, security, and operational continuity. For Vodafone business customers, this means faster response times, greater storage and processing capacity, and the possibility to scale digital initiatives—from artificial intelligence environments to cloud-native applications—on infrastructure located in Spain.
