The Industrial Cybersecurity Center in Peru

Team

Jorge Abanto

Jorge Abanto is the Cybersecurity Center Coordinator for Peru. Professional with over 20 years of work experience, International Diploma in Cybersecurity, with specializations and international certifications in Information Security, Audit, Risk Management and Management in Public Administration, such as ISO27001 LA (Information Security Management Systems Auditor / Lead Auditor ), CISM (Certified Information Security Manager), […]

Ernesto Landa

Systems Engineer Graduated from the University of Lima (Peru) with more than 10 years of experience in Information Technology and Telecommunications in the Energy and Hydrocarbons Sector. Specialist in Information Security and Cybersecurity in Critical Infrastructures, is an active member of the Industrial Cybersecurity Committee of the Regional Association of Companies of the Oil, Gas […]

Claudio Caracciolo

Es Coordinador del Centro de Ciberseguridad Industrial en Latinoamérica. Además de: Chief Security Ambassador at Eleven Paths ISSA Argentina Chapter’s President (2011-2013 and 2013-2015) Coordinator at Centro de Ciberseguridad Industrial (CCI-Es.org) in Argentina Co-Founder at Root-Secure SRL Information Security Consultant with international certifications, mainly oriented on penetration test techniques, but with a particular passion by […]

Mr. Jorge Abanto, the Industrial Cibersecurity Center Coordinator in Peru (CCI Coordinators Team), helps us to get in context of the state of the industrial cybersecurity in his country, and to do so, he shares with us his impressions.

He describes the level of sensitivity of industrial organizations in his country according to the following percentages:

He also affirms that the trend of recent years has exponentially grown.

Peru counts with local and national public bodies promoting an adequate legal framework, in order to ensure the progressive incorporation of industrial cybersecurity measures in national presence companies (mainly critical infrastructure). The main organizations are:

  • GOficina Nacional de Gobierno Electrónico e Informática (ONGEI)
  • PeCERT

Among the main national laws and regulations affecting in this context in Peru, Jorge Abanto mentions:

  • Law 30096 of Computer Crimes
  • Law 29723 on Personal Data Protection
  • Cyber Security Strategy (Under development)
  • National Critical Infrastructure Protection Act (Under development)

Analysing the most widely adopted industrial cybersecurity measures by Peruvian organizations to protect industrial automation systems, Jorge Abanto highlights the application of:

  • IDS/IPS
  • Conventional Firewalls
  • Network design and architectures
  • Internal security audits
  • External security audits
  • Ethical hacking
  • Industrial cybersecurity consulting / advisory

The CCI Coordinator in Peru characterizes the industrial cybersecurity situation in his country with the following SWOT analysis:

Weaknesses

  • Lack of events and forums on industrial cybersecurity

  • Lack of operational technologies certifications, processes and professionals

  • Lack of specific industry cybersecurity legislation

  • Lack of a solutions and services catalogue of industrial cybersecurity

  • Lack of specific CERTs

Strengths

  • Increase of trained professionals in Industrial Cybersecurity

  • Awareness, especially regarding industrial critical infrastructures

Threats

  • Slow legislation

  • Shortage of local industrial cybersecurity professionals working for manufacturers

  • Application of IT security measures without discretion

  • High development of industrial applications without cybersecurity requirements

Opportunities

  • Strategic position in the industrial cyber security sector.

Activities

Encuentro de La Voz de la Industria celebrado en Lima el 13 de junio de 2019

CCI celebrated a meeting at the Boulevard Hotel, Av. José Pardo 771, Miraflores 15074, in Peru aimed at Peruvian industry, in which a broad comparison of the state of Industrial Cybersecurity in Latin America was presented for the first tim …

Great attendance at the VIII International Congress of Industrial Cybersecurity that ICC held on June 7 and 8 in Lima, Peru

As a fundamental part of its activity, the Industrial Cyber ​​Security Center (CCI) has held its VIII International Congress of Industrial Cybersecurity, as one of the events of reference for the Latin American market, and as a meeting point and exchange of knowledge, experiences And relations of all the actors involved in this field.

Industrial Cybersecurity Management Workshop in Paraguay. June 19, 2019

On June 11 and 12 at the Boulevard Hotel, Av. José Pardo 771, Miraflores 15074 in Peru, CCI will hold the two most demanded workshops of the Professional School of Industrial Cybersecurity that based on a practical case allow the participan .

On November 10, 2016, the first meeting of Industrial Cyber Security was held in Peru

CCI together with the Ministry of Defense of Peru, has organized the first meeting of Industrial Cybersecurity in Lima to share knowledge and experiences. Attendees have been able to learn about the main technological risks in industrial sectors and critical infrastructures, as well as recommendations to protect the automation systems that control both critical infrastructures […]

XIV International Congress of Industrial Cybersecurity in Latin America, held from October 27 to 29, in Virtual Format

As a fundamental part of its activity, the Center for Industrial Cybersecurity (CCI) has held its XIV International Congress on Industrial Cybersecurity in Latin America. Reference event for the Latin American market, and a meeting point and exchange of knowledge, experiences and relationships of all the actors involved in this field.