The Industrial Cybersecurity Center in Paraguay

Team

Santiago Vazquez

Santiago Gonzalez Raul Vazquez is Computer Systems Engineer, holds a Certificate in Advanced Management in Cyber Security Incidents (Carnegie Mellon University). Is Master in Strategic Planning and National Driving. In 1999 he started his management in Multinational ICT (TIGO – Millicom International), Technical of Network Operations Center (NOC) As Public Officer, served as Technology Specialist […]

Claudio Caracciolo

He is Coordinator of the Industrial Cybersecurity Center in Latin America. In addition to: Team Leader of the Chief Security Ambassadors team and of the LATAM Innovation and Laboratory Office, of ElevenPaths. General Coordinator for LATAM of the Industrial Cybersecurity Center (CCI-Es.org). Information Security Specialist Consultant with a passion for Social Engineering, Industrial Cybersecurity and […]

Mr. Santiago Vazquez, the Industrial Cibersecurity Center Coordinator in Paraguay (CCI Coordinators Team), helps us to get in context of the state of the industrial cybersecurity in his country, and to do so, he shares with us his impressions.

He describes the level of sensitivity of industrial organizations in his country according to the following percentages:

He also affirms that the trend of recent years has exponentially grown.

Paraguay counts with local and national public bodies promoting an adequate legal framework, in order to ensure the progressive incorporation of industrial cybersecurity measures in national presence companies (mainly critical infrastructure). The main organizations are:

  • SENATICs
  • Ministry of National Defense
  • Nacional Police
  • Ministerry of Public
  • Ministry of Interior

Among the main national laws and regulations affecting in this context in Paraguay, Santiago Vazquez cites the Law 4439/11: Computer Crime, however clarifies that it is more a general Cybersecurity law than an specific Industrial Cybersecurity Law.

Analysing the most widely adopted industrial cybersecurity measures by Paraguayan organizations to protect industrial automation systems, Santiago Vazquez highlights the application of:

  • External security audits
  • Network design and architectures
  • Development of continuity and / or contingency plans
  • Conventional firewalls
  • Antivirus

The CCI Coordinator in Paraguay characterizes the industrial cybersecurity situation in his country with the following SWOT analysis:

Weaknesses

  • Lack of operational technologies certifications, processes and professionals

  • Lack of specific industry cybersecurity legislation

  • Lack of events and forums on industrial cybersecurity

  • Lack of a solutions and services catalogue of industrial cybersecurity

  • Lack of specific CERTs

Strengths

  • Santiago Vazquez notes that there is little work done regarding Industrial Cibersecurity, therefore no remarkable strengths are appreciated

Threats

  • Application of IT security measures without discretion

  • Shortage of local industrial cybersecurity professionals working for manufacturers

  • Shortage of specific industrial cybersecurity risk management tools

Opportunities

  • Increased of cibersecurity demand for Industry 4.0 and the Internet of things.

  • Strategic position in the industrial cyber security sector

Activities

First Meeting of “La Voz de la Industria” held in Paraguay on June 20, 2019

CCI has held in Asunción, Paraguay, the first meeting aimed at the Paraguayan industry, presenting for the first time the preliminary results of the study on the state of cybersecurity in the industry of Paraguay.

XIV International Congress of Industrial Cybersecurity in Latin America, held from October 27 to 29, in Virtual Format

As a fundamental part of its activity, the Center for Industrial Cybersecurity (CCI) has held its XIV International Congress on Industrial Cybersecurity in Latin America. Reference event for the Latin American market, and a meeting point and exchange of knowledge, experiences and relationships of all the actors involved in this field.