DERECHOS DIGITALES
CYBERSECURITY IN LATIN AMERICA: NATIONAL STRATEGIES IN 2024
9
actions, including the protection of critical information infrastructures, the response to
cyber incidents, and the promotion of a digital security culture in Colombian society.
These are all efforts of a policy-level strategy to enhance Colombia’s cybersecurity
capabilities6, which in addition to the creation of the Agency, this strategy includes
reinforcing the Colombian Cyber Incident Response Center (ColCERT), establishing a
cybersecurity center in Caldas, and improving training and education in cybersecurity
specializations.
2.5. Costa Rica: National Cybersecurity Strategy 2023-2027
In 2017, Costa Rica implemented its first National Cybersecurity Strategy, establishing
a framework to protect its critical infrastructures and promote a digital security culture.
However, in the face of increasing cyber threats and technological evolution, the need to
update this strategy was recognized. In November 2023, the Ministry of Science, Innovation,
Technology and Telecommunications (MICITT, an acronym for Ministerio de Ciencia,
Innovación, Tecnología y Telecomunicaciones, in Spanish) presented the new National
Cybersecurity Strategy 2023-20277, with the goal of enhancing the country’s resilience
against cyber threats and guaranteeing a secure digital environment for citizens.
The National Cybersecurity Strategy 2023-2027 is articulated around five major pillars:
governance and coordination; legal and regulatory frameworks; infrastructure protection
and cyber-resilience: education, training and awareness; and cooperation and alliances.
These pillars seek to establish a comprehensive framework for action to prevent and
mitigate risks and threats in the digital environment, foster innovation, and the development
of cybersecurity solutions, strengthen incident response capacity and promote a solid
security culture in Costa Rican society.
In terms of organization, the MICITT leads the implementation of the strategy in coordination
with the Computer Security Incident Response Center (CSIRT-CR), which, as the entity
in charge of coordinating cyber and information security in the country, operates as an
essential component of this strategy. The strategy incorporates the active participation of
public institutions, private companies, civil society, and academia, ensuring a multisectoral
approach to cybersecurity strengthening in the country.
2.6. Ecuador: ENC
On August 3, 2022, the country presented its first National Cybersecurity Strategy (ENC,
anacronym for Estrategia Nacional de Ciberseguridad, in Spanish), developed by the
Ministry of Telecommunications and Information Society (MINTEL). This strategy seeks to
provide citizens with more secure access to digital services and strengthen the protection
of their personal data, in the context of the recent enactment of its first comprehensive
national law on data protection.
(6) "Ministro TIC presenta la estrategia de cuatro puntos para hacer de Colombia una potencia en Ciberseguridad",
MINTIC, July 19, 2023. Available at: https://www.mintic.gov.co/portal/inicio/Sala-de-prensa/Noticias/276939:MinistroTIC-presenta-la-estrategia-de-cuatro-puntos-para-hacer-de-Colombia-una-potencia-en-Ciberseguridad
(7) Available at: https://www.micitt.go.cr/sites/default/files/2023-11/NCS%20Costa%20Rica%20-%20
10Nov2023%20SPA.pdf