National Disaster Platform 2026: what strategic sector companies must do

Key data

Strategic sector companies in Spain have a new institutional contact to pay attention to: the National Platform for Disaster Risk Reduction, created by Agreement of the Council of Ministers of April 21, 2026 and published in the BOE on April 27, 2026.

This organization is not just another bureaucratic entity. Its mandate is to coordinate national policies for prevention, mitigation and response to natural disasters and emergencies, with the capacity to establish protocols that will directly affect how companies operate in sectors considered strategic.

The key for executives and CFOs: this organization has the authority to develop action plans and operating protocols that companies in strategic sectors must incorporate into their risk management systems. The operational impact will materialize as these plans are approved.

What does this regulation establish?

The resolution publishes the Agreement of the Council of Ministers by which the National Platform for Disaster Risk Reduction is created and its organization and operation are regulated. These are the key structural elements:

The platform acts as a coordination hub: it connects the ministerial level with the territorial level and with the private sector, which means its decisions can have a cascading effect on the obligations of companies in critical sectors.

The link to the Sendai Framework 2015-2030 is relevant: Spain aligns with an international standard that has already been adopted by dozens of countries and includes measurable objectives for reducing losses from disasters, both human and economic.

Economic and operational impact

At this time, the regulation does not establish direct costs or specific sanctions for companies. The economic and operational impact will materialize when the platform approves its action plans and specific protocols.

However, executives should anticipate the following impact vectors:

• Review of business continuity plans: The protocols issued by the platform may require updates to contingency plans and operational resilience of companies in strategic sectors.
• Adaptation of risk management systems: Companies must integrate new resilience standards into their existing risk management frameworks (ISO 22301, ISO 31000 or others).
• Coordination with administrations: Being an inter-territorial body, companies with presence in multiple autonomous communities must manage coordination with different administrative levels.
• Investment in resilience: Reducing vulnerability to extreme events implies potential investments in infrastructure, alert systems and training.

The context justifies it: natural disasters generate significant economic losses in Spain every year. The October 2024 DANA in Valencia is the most recent example of how an extreme event can paralyze entire sectors. This platform seeks to reduce precisely that vulnerability.

Who does it affect?

The regulation identifies three main groups of affected parties:

• Public administrations: Ministries, autonomous communities, provincial councils and municipalities that must coordinate through the platform.
• Companies in strategic sectors: Those whose activity is critical to the country's functioning and that must adapt to new resilience and risk management protocols. Typically include energy, telecommunications, transport, water, food, healthcare and financial services, although specific sectors will be defined in regulatory development.
• Emergency organizations: Civil Protection, fire services, Red Cross and other organizations specialized in emergency response.

Civil society will also participate as an integral part of the platform, which opens the door for business and sector associations to have a voice in the development of protocols.

Practical example

An electricity distribution company with infrastructure in several autonomous communities directly enters the scope of strategic sectors that this platform will coordinate.

When the National Platform approves its first action plan, this company must review whether its current response protocols to extreme events (storms, floods, fires) align with the new national standards. If not, it will have to update its business continuity plan, train its personnel in the new protocols and establish communication channels with the corresponding territorial administrations.

The cost of this adaptation will depend on the current state of its risk management systems: a company already working under ISO 22301 will have less adaptation effort than one without a formalized continuity plan.

What should companies do now?

1. Identify if your company is a strategic sector: Review whether your activity can be classified as critical or strategic (energy, telecommunications, transport, water, food, healthcare, financial services). If in doubt, consult with your legal advisor.
2. Audit the current state of your business continuity plan: Before specific protocols arrive, know your starting point. Do you have a formalized continuity plan? Does it include natural disaster scenarios?
3. Designate a regulatory monitoring officer: Assign someone in your organization (or your advisory firm) to monitor the action plans and protocols approved by the platform.
4. Review existing risk management systems: If you work with frameworks like ISO 31000 or ISO 22301, prepare a review to incorporate new standards when published.
5. Participate in consultation channels: By integrating the private sector, the platform can open consultation or participation periods. Being present in sector associations will allow you to influence the development of protocols.