The Industrial Cybersecurity Center in Ecuador

Team

Mary Carmen Vargas

Mary Vargas is Coordinator of the Center for Industrial Cybersecurity in Ecuador, Computer Engineer with a Mention in Communication Networks. Mary has an MBA in Business Administration; and, Diplomas in Computer Security, Internetworking Networks and Digital Transformation. She has worked in the Electricity Sector for more than 15 years, in the field of Information Technology, […]

Fernando Guerrero

Computer and systems engineer. With a Masters in Sciences in Germany, in the branch of Computational Engineering and a Masters in Arts, in Spain, in the branch of Strategic Management and Innovation Management. Fernando has worked for more than 14 years in the electrical sector, always in the branch of Cybersecurity. With extensive knowledge in […]

Claudio Caracciolo

He is Head of Platforms, Innovation and Talent. In addition to: General Coordinator for the Industrial Cybersecurity Center for LATAM (CCI-Es.org)· Chief Data Officer (CDO) of Auravant. Specialist Consultant of Information Security passionate about Social Engineering, Industrial Cybersecurity and CarHacking. Lecturer in the Cybersecurity Strategy and Management Diploma at UCEMA. Professor in the Postgraduate Program […]

Mr. Fernando Guerrero, the Industrial Cibersecurity Center Coordinator in Ecuador (CCI Coordinators Team), helps us to get in context of the state of the industrial cybersecurity in his country, and to do so, he shares with us his impressions.

He describes the level of sensitivity of industrial organizations in his country according to the following percentages:

He also affirms that the trend of recent years has been a slight increase.

Ecuador counts with local and national public bodies promoting an adequate legal framework, in order to ensure the progressive incorporation of industrial cybersecurity measures in national presence companies (mainly critical infrastructure). The main organizations are:

  • Secretaria Nacional de Inteligencia
  • Ministerio de Telecomunicaciones
  • Agencia de Regulación y Control de Telecomunicaciones
  • Comando Conjunto de las Fuerzas Armadas

Among the main national laws and regulations affecting in this context in Ecuador, Fernando Guerrero mentions:

  • Código Orgánico Integral Penal
  • Ley Orgánica de Transparencia y Acceso a la Información Pública
  • Ley de Seguridad Pública y del Estado
  • Esquema Gubernamental de Seguridad de Información
  • Ley de Comercio Electrónico, Firmas Electrónicas y Mensajes de Datos

Analysing the most widely adopted industrial cybersecurity measures by Ecuadorian organizations to protect industrial automation systems, Fernando Guerrero highlights the application of:

  • Industrial cybersecurity consulting / advisory
  • Implementation of safety management systems
  • Development of continuity and / or contingency plans
  • Conventional firewalls

The CCI Coordinator in Ecuador characterizes the industrial cybersecurity situation in his country with the following SWOT analysis:

Weaknesses

  • Lack of operational technologies certifications, processes and professionals

  • Lack of specific industry cybersecurity legislation

  • Lack of events and forums on industrial cybersecurity

  • Lack of a solutions and services catalogue of industrial cybersecurity

  • Lack of specific CERTs

Strengths

  • Public organizations driven force (industry, national issues and defence).

Threats

  • Application of IT security measures without discretion

  • Slow legislation

  • Shortage of local industrial cybersecurity professionals working for manufacturers

  • Shortage of specific industrial cybersecurity risk management tools

Opportunities

  • Increased of cibersecurity demand for Industry 4.0 and the Internet of things.

  • Advantage with the lessons learned from smart grid cibersecurity.

  • Strategic position in the industrial cyber security sector

Activities

CCI held a grand X International Congress of Industrial Cyber Security in Latin America. Quito (Ecuador) on May 30 and 31

As a fundamental part of its activity, the Industrial Cybersecurity Center (CCI) will hold its X International Congress of Industrial Cybersecurity, in Latin America, as one of the reference events for the Ibero-American market, and as a point of meeting and exchange of knowledge , experiences and relationships of all the actors involved in this […]

Promoting the Industrial Cybersecurity in Ecuador

The Industrial Cybersecurity Center (CCI) has organized for first time in Quito, Ecuador, the training course Industrial Cybersecurity and Critical Infrastructure Protection, sponsored by the company GMS; this is the largest Information Security provider of the country. The course was organized under the coordination of Mr. Carlos Jumbo, Ecuador’s Inforec CEO. The course was held […]

XIV International Congress of Industrial Cybersecurity in Latin America, held from October 27 to 29, in Virtual Format

As a fundamental part of its activity, the Center for Industrial Cybersecurity (CCI) has held its XIV International Congress on Industrial Cybersecurity in Latin America. Reference event for the Latin American market, and a meeting point and exchange of knowledge, experiences and relationships of all the actors involved in this field.

CERT's and CSIRT's from this Country

Argentina

CSIRT NQN

Sitio webWebsite View feed

Argentina

CSIRT Córdoba

Argentina

CERTUNLP

  • Academic
  • Ámbito de aplicaciónScope: IT

Academic Security Incident Response Centre (CSIRT) of the National University of La Plata

Argentina

BA-CSIRT

CSIRT for end users, Cybersecurity Centre of the Government of the Autonomous City of Buenos Aires

Argentina

Cert.ar

Austria

CERT.at

Bahamas

CIRT BS

Sitio webWebsite View feed

Belgium

CERT.BE

Sitio webWebsite View feed

Brazil

CTIR Gov

Centre for Prevention, Treatment and Response to Government Cyber Incidents

Brazil

CERTbr

Sitio webWebsite View feed

Canada

Cyber Centre

Chile

CSIRT Nacional

Article 24 of Law No. 21,663 creates within the National Cybersecurity Agency the National Computer Security Incident Response Team.

Sitio webWebsite View feed

Chile

CSIRT REUNA

  • Academic
  • Ámbito de aplicaciónScope: IT

Chile

CLCERT

  • Academic
  • Ámbito de aplicaciónScope: IT

Colombia

Min Defensa – Policia

  • Government
  • Ámbito de aplicaciónScope: Militar Military

Colombia

CSIRT‑CCIT

Colombia

colCERT

Croatia

CERT.hr

Sitio webWebsite View feed

Cuba

CSIRT-BCF

  • Private
  • Ámbito de aplicaciónScope: IT

Cuba

OSRI

Denmark

Airbus Protect CSIRT

  • OT, Private
  • Ámbito de aplicaciónScope: OT

Denmark

DKCERT

Sitio webWebsite View feed

Ecuador

CSIRT UTPL

  • Academic
  • Ámbito de aplicaciónScope: IT

Ecuador

CSIRT CEDIA

  • Academic
  • Ámbito de aplicaciónScope: IT

Ecuador

EcuCERT

Estonia

EDF CIRC

Sitio webWebsite View feed

Estonia

CERT‑EE

Sitio webWebsite View feed

European Union

ENISA CSIRT Network

The European Union CSIRTs network is a network composed of EU Member States’ appointed CSIRTs and CERT-EU (“CSIRTs network members”). The European Commission participates in the network as an observer.

European Union

EGI CSIRT

European Union

ESA CERT

European Union

EATM‑CERT

European Union

CERT‑EU

Finland

NCSC‑FI

France

PSIRT Scheneider Electric

  • OT, Private
  • Ámbito de aplicaciónScope: OT

France

ENGIE CERT

  • Private
  • Ámbito de aplicaciónScope: IT

France

CERT‑FR

Sitio webWebsite View feed

Germany

PSIRT Siemens

  • OT, Private
  • Ámbito de aplicaciónScope: OT

Guatemala

GT Cert

CERT coordinator of the Republic of Guatemala, covered by the regulatory framework of the Law Against Cybercrime and recognised by FIRST

Honduras

CSIRT_HONDURAS

Italy

Enel CERT

  • Private
  • Ámbito de aplicaciónScope: IT

Jamaica

JaCIRT

Sitio webWebsite View feed

Latvia

CERT.LV

Mexico

UNAM‑CERT

  • Academic
  • Ámbito de aplicaciónScope: IT

Mexico

CERT-MX

Sitio webWebsite View feed

Netherlands

NCSC‑NL

Sitio webWebsite View feed

Norway

NSM‑NCSC

Sitio webWebsite View feed

Panama

CertPA

Sitio webWebsite View feed

Paraguay

CERT-PY

Peru

PeCERT

Poland

CERT.PL

Sitio webWebsite View feed

Portugal

Euronext CSIRT

  • Private
  • Ámbito de aplicaciónScope: IT

Portugal

CNCS Portugal

Republica Dominicana

CSIRT-RD

CSIRT belonging to the National Cybersecurity Centre

Romania

CERT.RO

Sitio webWebsite View feed

Slovakia

ENERGOTEL.SK-CSIRT

  • Private
  • Ámbito de aplicaciónScope: IT

Slovakia

SK‑CERT

Sitio webWebsite View feed

Slovenia

SI‑CERT

Sitio webWebsite View feed

Spain

CSIRT-MIR-PJ

Spain

CSIRT-CV

Spain

INCIBE-CERT

Spain

CSIRT.gal

Spain

CCN‑CERT

Sitio webWebsite View feed

Surinam

SUR-CSIRT

Sitio webWebsite View feed

Sweden

CERT‑SE

Sitio webWebsite View feed

Swiss

PSIRT ABB

  • OT, Private
  • Ámbito de aplicaciónScope: OT
Sitio webWebsite View feed

Swiss

Swiss GovCERT

Sitio webWebsite View feed

Trinidad and Tobago

TT-CSIRT

Sitio webWebsite View feed

Ukraine

CERT‑UA

Sitio webWebsite View feed

United Kingdom

UK NCSC

United States

US-CERT OT Cybersecurity

United States

US-CERT Cybersecurity

Uruguay

CSIRT ANTEL

  • Private
  • Ámbito de aplicaciónScope: IT

Uruguay

Cert.uy

Venezuela

VenCERT

Patrocinadores del Centro en el País

Bronze