The Industrial Cybersecurity Center in Uruguay

Team

Mateo Martinez

Information Security Professional with international experience since 2001. He has experience as auditor, pentester and Security Manager in many global companies like McAfee, Intel, PwC, Accenture and Tata Consultancy Services. He developed Information Security Projects in Dubai, Chicago and almost all latin american countries. He holds several certifications and credentials like CISSP (Certified Information Systems […]

Hernán Vázquez

Hernán is Manager of Information Technologies in the REGIONAL ASSOCIATION OF OIL, GAS AND BIOFUELS COMPANIES IN LATIN AMERICA AND THE CARIBBEAN (since 2002) He currently leads the ARPEL Cybersecurity Group, made up of different Cybersecurity experts from the associated companies. This group has made in the last years, different events, workshops and documents in […]

Claudio Caracciolo

Es Coordinador del Centro de Ciberseguridad Industrial en Latinoamérica. Además de: Chief Security Ambassador at Eleven Paths ISSA Argentina Chapter’s President (2011-2013 and 2013-2015) Coordinator at Centro de Ciberseguridad Industrial (CCI-Es.org) in Argentina Co-Founder at Root-Secure SRL Information Security Consultant with international certifications, mainly oriented on penetration test techniques, but with a particular passion by […]

Andrea Parada

Andrea is an Information Security Specialist since 1999. She has led projects of great importance related to the implementation of Cybersecurity solutions. She has extensive experience in consulting and advising on Implementation of Management Systems and Certification 27001, as well as in Risk Management of Cybersecurity. She has given talks on awareness-raising in the field […]

Mr. Mateo Martinez, the Industrial Cibersecurity Center Coordinator in Uruguay, ( CCI Coordinators Team), helps us to get in context of the state of the industrial cybersecurity in his country, and to do so, he shares with us his impressions.

He describes the level of sensitivity of industrial organizations in his country according to the following percentages:

He also affirms that the trend of recent years has been an exponentially grown.

Uruguay counts with local and national public bodies promoting an adequate legal framework, in order to ensure the progressive incorporation of industrial cybersecurity measures in national presence companies (mainly critical infrastructure). The main organizations are:

  • Ministry of National Defense
  • AGESIC
  • Ministry of Industry
  • UTE
  • OSE

Currently (first half 2016) there is no specific legislation governing industrial cybersecurity in organizations from Uruguay.

Analysing the most widely adopted industrial cybersecurity measures by Uruguayan organizations to protect industrial automation systems, Mateo Martinez highlights the application of:

  • Industrial cybersecurity consulting / advisory
  • Ethical hacking
  • Implementation of safety management systems
  • Internal security audits
  • Development of continuity and / or contingency plans
  • SIEM (Security information and event management)
  • Log correlation
  • Antivirus

The CCI Coordinator in Uruguay characterizes the industrial cybersecurity situation in his country with the following SWOT analysis:

Weaknesses

  • Lack of specific industry cybersecurity legislation

  • Lack of events and forums on industrial cybersecurity

  • Lack of specific CERTs

Strengths

  • Awareness, especially regarding industrial critical infrastructures

Threats

  • Shortage of local industrial cybersecurity professionals working for manufacturers

  • Shortage of specific industrial cybersecurity risk management tools

Opportunities

  • Increased of cibersecurity demand for Industry 4.0 and the Internet of things

  • Advantage with the lessons learned from smart grid cibersecurity.

  • Strategic position in the industrial cyber security sector

Activities

CCI has held its first “La Voz de la Industria” meeting in Uruguay on June 7

CCI has held a meeting at the Radisson Montevideo Victoria Plaza Hotel (Plaza Independencia 759, 11100 Montevideo, Uruguay) aimed at the industry of Uruguay, presenting for the first time the preliminary results of the study on the state of cybersecurity in the industry of Uruguay.

XIV International Congress of Industrial Cybersecurity in Latin America, held from October 27 to 29, in Virtual Format

As a fundamental part of its activity, the Center for Industrial Cybersecurity (CCI) has held its XIV International Congress on Industrial Cybersecurity in Latin America. Reference event for the Latin American market, and a meeting point and exchange of knowledge, experiences and relationships of all the actors involved in this field.