Estrategia TI y seguridad para el Ayuntamiento de Barcelona
End-to-end digital transformation: an IT strategy aligned with the EU digital agenda, real-time analytics for decision-makers, and an ENS/NIST security framework with verified GDPR compliance.
Context
A metropolitan city council cannot afford silos: dozens of departments, public-sector mandates, and an EU digital agenda with hard deadlines. The IT strategy had grown by stacking projects, not by design — and security was addressed late, as a patch, instead of early, as a requirement.
Decision
I treated the transformation as a coordinated portfolio rather than a sum of projects:
- An integrated IT strategy, aligned with organizational objectives, public-sector mandates, and the EU digital agenda.
- Interactive dashboards so decision-makers could see the present — not last month’s report — across multiple municipal departments.
- Security by design: risk assessments and mitigation strategies built on the ENS and NIST frameworks from day one.
Result
An integrated IT strategy delivered, real-time analytics dashboards for executive stakeholders, and a risk management cycle with verified GDPR compliance and ISO 27001 alignment.
The hardest part was not technical: it was keeping dozens of municipal interests pointed in the same direction while the regulatory ground kept shifting.