Basque Country

Basque Country is an autonomous community in Spain with its own government, providing public services such as administration, education, health, infrastructure, and cultural promotion to residents. It exercises legislative and executive powers devolved by the Spanish state, managing regional policies and coordinating with local municipalities. Its scope includes the territories of Álava, Biscay, and Gipuzkoa, serving a population that resides within these provinces. The organisation also represents the Basque Country in intergovernmental forums and maintains diplomatic and economic relations with other regions and countries. It oversees public safety, emergency management, and civil protection across its territory. Additionally, it supports economic development initiatives aimed at strengthening industrial sectors like advanced manufacturing, renewable energy, and tourism.

The Basque Country possesses a dedicated regional cyber authority that monitors, coordinates, and responds to cybersecurity incidents affecting public administrations within its jurisdiction, as evidenced by its confirmation that the March 2025 attack on Irún and other municipalities was widespread yet contained. This authority works closely with national entities such as Spain's National Cryptologic Center, which was notified during the January 2023 municipal cyberattack, demonstrating integration into the broader national cybersecurity framework. The region's approach emphasizes rapid incident containment, restoration of services, and transparent communication with affected citizens and institutions. Its regulatory role includes setting cybersecurity standards for local governments and providing guidance on risk assessment and mitigation. The Basque Country also leverages its unique cultural and linguistic identity to foster community resilience and public trust during crises. These characteristics position it as a proactive subnational actor in safeguarding digital infrastructure and public service continuity.