LUCIA (Unified List for Incident and Threat Coordination) is a tool developed by the CCN-CERT for the management of cyber incidents in the entities participating in the National Security Scheme. The purpose is to improve coordination between the National Government CERT and the different collaborating bodies and organizations.

LUCIA offers a common language to assess risk level and classify incidents, and enables traceability and monitoring. The system also allows carrying out tasks automatically and can be integrated into already installed systems


Thanks to the LUCIA tool, entities will be able to manage three types of cyber incidents

  • Incidents arisen from the own Body
  • Incidents arisen from the Early Alert System of the SARA Network (SAT-SARA)
  • Incidents arisen from the Early Alert System of Internet (SAT-INET)

Documents and downloads

LUCIA system and updates | password: LUCIA


PGP Key Download

FINGERPRINT 35FF 941E 4B99 5E63 6DE2 FE03 5DEF 5388 47CD 093A


Ministerio de Defensa