Cybersecurity regulation and procurement in Latin America

In Chile, new measures have been introduced to strengthen cybersecurity through both procurement and regulatory frameworks. ChileCompra implemented a cybersecurity directive for public procurement, establishing 17 standardized clauses for state contracts to address data confidentiality, incident notification, and audit requirements. This includes a coordinated purchase of Extended Detection and Response (XDR) licenses for government infrastructure.

Concurrently, Chile’s Framework Law on Cybersecurity, overseen by the National Cybersecurity Agency (ANCI), has established strict reporting mandates for essential services and Operators of Vital Importance (OIV). These organizations must provide an initial alert within three hours of an incident, followed by subsequent reports at 72-hour and 15-day intervals. Failure to comply with these regulations can result in fines of up to approximately USD 3 million.

In Colombia, efforts to improve security include the release of technical guides by Genetec Inc. to assist companies in auditing hardware and connected system providers. This initiative focuses on vulnerability management for devices like biometric controls and IoT panels to prevent them from becoming entry points for cybercriminals.