A/75/123
reduced, transferred or avoided. To reduce the risk, they can select and apply security
measures, or consider innovation and preparedness measures.
Accordingly, in case of ICT incidents, Colombia considers all relevant
information, including the larger context of the event, the challenges of attribution in
the ICT environment, and the nature and extent of the consequences.
With regard to the characterization of incidents and their mandatory reporting
to the competent authorities, the Commission for the Regulation of Communications,
in defining categories of information security incidents in decision No. 5569 of 2018,
also took into account the guidelines and best practices set forth in the 27000 series
of standards developed by the International Organization for Standardization and the
International Electrotechnical Commission (in particular the categories identified in
standard No. 27035-1). Under that decision, when information security incidents
occur, communications network and service providers are requir ed to send an
electronic report to the Computer Emergency Response Group of Colombia after
containment, eradication and recovery.
In line with the recommendation that States should not knowingly allow their
territory to be used for internationally wrongful acts using ICTs, the State of Colombia
prevents and responds to cybersecurity incidents of all classifications and types
throughout the country through the Digital Security Committee, whose members
include State cybersecurity entities such as the Computer Emergency Response Group
of Colombia, the Joint Cyber Command, the Cyber Police Centre and the
Government’s computer security incident response team.
Colombia seeks to cooperate at the international level through information
exchange, mutual assistance, the prosecution of the terrorist and criminal use of ICTs,
and the implementation of other cooperative measures to address thr eats.
In that regard, the new National Council for Economic and Social Policy
document on digital trust and security, which is being developed, provides for the
establishment and implementation of a cyberinformation exchange system aimed at
facilitating the dissemination of indicators of compromise among stakeholders which
interact in the digital environment at the national and in ternational levels. This system
will be aligned with the single, central registry for digital security incidents.
The Attorney General’s Office uses international cooperation channels in
accordance with bilateral and multilateral agreements. However, a secure
technological channel or web service needs to be established in order to enable it to
directly consult and obtain information from Internet service providers, most of which
are private, so that requests for mutual legal assistance can be sent, receive d,
exchanged, considered, and responded to in a timely manner.
Under the current mechanisms, response times are slow, hinderi ng criminal
proceedings. When the response is received, the investigation is often at a stage at
which it is unfeasible to use the outcome in the proceedings.
The National Intelligence Directorate has been coordinating with intelligence
agencies in certain countries on developing a process for exchanging operational
information in a timely manner, and for requesting additional info rmation relating to
specific incidents which require investigation or confirmation.
This coordination concerns additional information relating to incidents or trends
identified in cyberspace for which the correlation of events or activity histories is
required in order to monitor hostile actors that operate in cyberspace.
The Constitutional Court of Colombia has issued a number of judgments which
relate to the recommendation that, in ensuring the secure use of ICTs, States should
respect Human Rights Council resolutions 20/8 and 26/13 on the promotion,
18/84
20-08285
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents