A/75/123
technological infrastructure, and that are designed for the bodies and entities
responsible for cybersecurity and key sectors. Likewise, and as part of the
strengthening of capacities, it is important to regularly update the catalogue of
national critical cyberinfrastructure and the related protection plans, as well as the
mechanisms for coordination between them.
Since this is a matter that concerns us all, it is essential to work on the creation
of educational content relating to digital security, so that it can be included in
academic curricula at different levels of education and in non -formal courses.
In view of the establishment of procedures for mutual assistance in responding
to incidents and in dealing with short-term network security problems, including
procedures for expediting assistance, Colombia has a national model for inciden t
response, which establishes the protocol for the management of incidents that occur
throughout the country, whereby the cyber entities act in accordance with their powers
and functions.
Specifically, the Government’s computer security incident response team was
established to strengthen the digital ecosystem in State entities, providing them with
services free of charge. The service catalogue covers three types of s ervices:
proactive, reactive and security management. These include website availability
monitoring, vulnerability analysis, monitoring of security events, support for incident
management and response, and awareness-raising with regard to incident
management.
The Government’s computer security incident response team coordinates with
the other State cyber entities (the Computer Emergency Response Group of
Colombia, the Joint Cyber Command and the Cyber Police Centre) to manage
incidents in State entities and, through the Digital Security Committee, is involved in
devising strategies to address issues that affect the digital security of private citizens
and the State.
In order to facilitate cross-border cooperation to address critical infrastructure
vulnerabilities that transcend national borders, the Attorney General’s Office also
coordinates with countries in the region on strategies for timely and streamlined
information exchange in national investigations in which there is knowledge of
possible attacks on or breaches of critical infrastructure.
The Ministry of Information and Communications Technology, through the
Government’s computer security incident response team, coordinates with the
Computer Emergency Response Group and the Cyber Police Centre to v alidate
information through various international sources that make it possible to expedit e
mitigation and investigation actions when warranted.
With regard to the development of sustainability strategies in capacity -building
initiatives relating to ICT security, guidelines and recommendations for capacity building were included in the various public policy instruments contained in National
Council for Economic and Social Policy documents Nos. 3711 and 3854 of 2016. In
addition, other administrative and legal measures to strengthen the response capacity
are announced by the Ministry of Information and Communications Technology and
the Ministry of Defence, among others.
In this regard, for example, cooperation agreements have been concluded
between the Government of Colombia and OAS, through which the parties combine
their technical cooperation efforts in order to support the updating of digital security
guidelines and the strengthening of technical capacities and skills for cyber risk
management through initiatives in two basic areas: (a) policy development and
dissemination and (b) capacity-building.
20-08285
23/84
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents