Find it in ECIJA
Legal memo - Royal Decree - Law 12/2018: Security of networks and information systems. (Spanish)