The Industrial Cybersecurity Center in Ecuador

Team

Mary Carmen Vargas

Mary Vargas is Coordinator of the Center for Industrial Cybersecurity in Ecuador, Computer Engineer with a Mention in Communication Networks. Mary has an MBA in Business Administration; and, Diplomas in Computer Security, Internetworking Networks and Digital Transformation. She has worked in the Electricity Sector for more than 15 years, in the field of Information Technology, […]

Juan Carlos Gómez

Electronic Engineer in Telecommunications specializing in Projects in the field of technology, Information Security and telecommunications. Experience in design and project management in telecommunications and technologies. Extensive analysis capacity for the identification of risks and preparation of solutions proposals in Information Security, as well as successful results through the definition of objectives, motivation and implementation […]

Fernando Guerrero

Computer and systems engineer. With a Masters in Sciences in Germany, in the branch of Computational Engineering and a Masters in Arts, in Spain, in the branch of Strategic Management and Innovation Management. Fernando has worked for more than 14 years in the electrical sector, always in the branch of Cybersecurity. With extensive knowledge in […]

Claudio Caracciolo

He is Coordinator of the Industrial Cybersecurity Center in Latin America. In addition to: Team Leader of the Chief Security Ambassadors team and of the LATAM Innovation and Laboratory Office, of ElevenPaths. General Coordinator for LATAM of the Industrial Cybersecurity Center (CCI-Es.org). Information Security Specialist Consultant with a passion for Social Engineering, Industrial Cybersecurity and […]

Mr. Fernando Guerrero, the Industrial Cibersecurity Center Coordinator in Ecuador (CCI Coordinators Team), helps us to get in context of the state of the industrial cybersecurity in his country, and to do so, he shares with us his impressions.

He describes the level of sensitivity of industrial organizations in his country according to the following percentages:

He also affirms that the trend of recent years has been a slight increase.

Ecuador counts with local and national public bodies promoting an adequate legal framework, in order to ensure the progressive incorporation of industrial cybersecurity measures in national presence companies (mainly critical infrastructure). The main organizations are:

  • Secretaria Nacional de Inteligencia
  • Ministerio de Telecomunicaciones
  • Agencia de Regulación y Control de Telecomunicaciones
  • Comando Conjunto de las Fuerzas Armadas

Among the main national laws and regulations affecting in this context in Ecuador, Fernando Guerrero mentions:

  • Código Orgánico Integral Penal
  • Ley Orgánica de Transparencia y Acceso a la Información Pública
  • Ley de Seguridad Pública y del Estado
  • Esquema Gubernamental de Seguridad de Información
  • Ley de Comercio Electrónico, Firmas Electrónicas y Mensajes de Datos

Analysing the most widely adopted industrial cybersecurity measures by Ecuadorian organizations to protect industrial automation systems, Fernando Guerrero highlights the application of:

  • Industrial cybersecurity consulting / advisory
  • Implementation of safety management systems
  • Development of continuity and / or contingency plans
  • Conventional firewalls

The CCI Coordinator in Ecuador characterizes the industrial cybersecurity situation in his country with the following SWOT analysis:

Weaknesses

  • Lack of operational technologies certifications, processes and professionals

  • Lack of specific industry cybersecurity legislation

  • Lack of events and forums on industrial cybersecurity

  • Lack of a solutions and services catalogue of industrial cybersecurity

  • Lack of specific CERTs

Strengths

  • Public organizations driven force (industry, national issues and defence).

Threats

  • Application of IT security measures without discretion

  • Slow legislation

  • Shortage of local industrial cybersecurity professionals working for manufacturers

  • Shortage of specific industrial cybersecurity risk management tools

Opportunities

  • Increased of cibersecurity demand for Industry 4.0 and the Internet of things.

  • Advantage with the lessons learned from smart grid cibersecurity.

  • Strategic position in the industrial cyber security sector

Activities

CCI held a grand X International Congress of Industrial Cyber Security in Latin America. Quito (Ecuador) on May 30 and 31

As a fundamental part of its activity, the Industrial Cybersecurity Center (CCI) will hold its X International Congress of Industrial Cybersecurity, in Latin America, as one of the reference events for the Ibero-American market, and as a point of meeting and exchange of knowledge , experiences and relationships of all the actors involved in this […]

Promoting the Industrial Cybersecurity in Ecuador

The Industrial Cybersecurity Center (CCI) has organized for first time in Quito, Ecuador, the training course Industrial Cybersecurity and Critical Infrastructure Protection, sponsored by the company GMS; this is the largest Information Security provider of the country. The course was organized under the coordination of Mr. Carlos Jumbo, Ecuador’s Inforec CEO. The course was held […]

XIV International Congress of Industrial Cybersecurity in Latin America, held from October 27 to 29, in Virtual Format

As a fundamental part of its activity, the Center for Industrial Cybersecurity (CCI) has held its XIV International Congress on Industrial Cybersecurity in Latin America. Reference event for the Latin American market, and a meeting point and exchange of knowledge, experiences and relationships of all the actors involved in this field.