Ciber360: a practical approach to managing a real cyber incident
Ciber360: a practical approach to managing a real cyber incident

From 23 to 26 March 2026, Universitat Pompeu Fabra hosted the course Ciber360: Atac, Intel·ligència, Impacte i Evidència, organized by the ARTEMISA Chair in collaboration with OnbrandinG. This training initiative was designed to offer an applied overview of the end-to-end management of a real cyber incident. The course made it possible to explore different dimensions of cybersecurity, combining technical, strategic, communicative and forensic aspects.
The first session focused on the reputational management of a cybersecurity incident and was delivered by Selva Orejón. This approach highlighted the public and communicative dimension of incidents, as well as the need to understand that a cybersecurity crisis can also have a major impact on an organization’s reputation. Selva Orejón is the founder and CEO of OnbrandinG, a company specialized in digital identity protection, cybersecurity and reputational crisis management. She has more than 20 years of experience in cyber intelligence, digital forensic analysis and online brand protection, collaborating with companies, public institutions and law enforcement agencies.
The second session addressed digital footprint exploitation and threat intelligence, with Tabatha Torres. The session introduced the use of open sources and information analysis to better understand threats, actors and digital contexts. Tabatha Torres is COO of OnbrandinG. She is an intelligence analyst, a court-appointed expert in open-source intelligence (OSINT), and a security director. She specializes in digital investigation, social media analysis and information gathering from open sources.
The third session was devoted to digital forensics and digital evidence, led by Bruno Pérez Juncà. This part of the course brought participants closer to the analysis of digital evidence and to its methodological and evidentiary value in real-world contexts. Bruno Pérez Juncà is a forensic expert at OnbrandinG. He is a senior specialist in DFIR (Digital Forensic and Incident Response), a certified CASA analyst (Cellebrite Advanced Smartphone Analyst), and a court-appointed computer forensics expert. He is the director of the digital forensic analysis laboratory Evidenciesdigitals.cat.
The final session was delivered by Martín Vigo and focused on red teaming. With this session, the course concluded by incorporating the perspective of offensive security and attack simulation as a way to better understand vulnerabilities and strengthen defense. Martín Vigo is Head of Red Teaming at OnbrandinG. He is a hacker, Red Teamer and cybersecurity researcher with more than a decade of experience in product security and software engineering.
Overall, Ciber360 offered a cross-cutting view of incident response, showing that managing a cyberattack requires coordination across multiple areas: communication and reputational impact, digital intelligence, forensic investigation, and offensive simulation. This combination of sessions and professional profiles made it possible to approach the full incident lifecycle from a practical and multidisciplinary perspective.
This publication is part of the project Artemisa, financed by “European Union NextGeneration-EU, the Recovery Plan, Transformation and Resilience, through INCIBE”.
