The document analyzes national cyber security strategies (NCSS) from 10 Latin American countries. It finds several common topics addressed across the strategies, including critical infrastructure protection, awareness and training, cyber law and legislation, and international cooperation. The strategies also commonly address cyber threats like cyber crime, espionage, and sabotage. There are opportunities for increased international cooperation through sharing resilience plans, joint training, and information exchange related to critical infrastructure protection and fighting cyber crime.

1. National Cyber Security Strategies
in Latin America
Eduardo Izycki
MICRADS, April 19 2018

2. SUMMARY
METHODOLOGY
CONCEPTS / DEFINITIONS
STRATEGIC OBJECTIVES
COMMON TOPICS
PROPOSITION
CONCLUSION

3. PROPOSITION

4. PROPOSITION
Cybersecurity and Nation-States
? !
Why is so difficult to reach some agreement
(consensus)
To reach consensus one must find common
ground

5. PROPOSITION
National Cyber Security Strategies (NCSS)
1 2
Political statements from subscribing
countries
Similarities in NCSS could be leveraged for
international consensus

6. PROPOSITION
• Brazil,
• Chile,
• Colombia,
• Costa Rica,
• Guatemala,
• Jamaica,
• Mexico,
• Panama,
• Paraguay,
• Trinidad and Tobago.
Latin American Countries with
NCSS

7. METHODOLOGY

8. National Cyber Security Framework Manual,
Cooperative Cyber Defence Centre of Excellence
(CCDCOE)
Guidebook on National Cyber Security Strategies,
European Network and Information Security Agency
(ENISA)
National Cybersecurity Strategy Guide, International
Telecommunications Union (ITU)
Analyzing a new generation of national
cybersecurity strategies for the Internet Economy,
Organization for Economic Co-operation and
Development (OECD)
Commonwealth Approach for National
Cybersecurity Strategies, Commonwealth
Telecommunications Organization (CTO)
Sources for comparing NCSS

9. • Critical Infrastructure Protection,
• Standards and Certification,
• Awareness and Training,
• Privacy,
• Cyber law and legislation,
• Coordination and framework,
• Fight cyber crime,
• International cooperation,
• Address cyber threats,
• Research and Development,
• Digital Economy,
• Public-Private Partnership.
Converging points among the
sources

10. 1
2 2
4
5
10 10
18
16
12
14
7
1 1 1
2 2
4
0
2
4
6
8
10
12
14
16
18
20
2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017
NCSS – Publishing Year
TEMPORAL ANALYSIS

11. CYBER MATURITY
ENSC EGDI (UN) GCI (UTI)
Brazil 2015 High Maturing State
Chile 2017 High Maturing State
Colombia 2011 – 2016 High Maturing State
Costa Rica 2016 High Initiating State
Guatemala 2017 Medium Maturing State
Jamaica 2015 Medium Maturing State
Mexico 2017 High Maturing State
Panama 2013 Medium Maturing State
Paraguay 2017 Medium Maturing State
Trinidad and Tobago 2012 High Initiating State

12. CONCEPTS / DEFINITIONS

13. CONCEPTS / DEFINITIONS
Explicitly defined by 6 countries:
• Chile,
• Colombia
• Costa Rica,
• Mexico,
• Panama e
• Trinidad and Tobago
CYBERSPACE CYBERSECURITY1 2
Common approach as holistic perspective
for cyberspace
Explicitly defined by 8 countries:
• Brasil,
• Chile,
• Colombia
• Costa Rica,
• Jamaica,
• Mexico,
• Paraguay,
• Trinidad and Tobago
Less consensus – presented as an
instrumental concept (tool/applications
that improve cybersecurity)

14. STRATEGIC OBJECTIVES

15. STRATEGIC OBJECTIVES
100%
90%
30%
90%
30%
60%
80%
40%
50%
30%
50%
30%
20%
0% 10% 20% 30% 40% 50% 60% 70% 80% 90% 100%
Objetivos Estratégicos Definidos
Proteção de infraestruturas críticas
Certificações e Padrões
Conscientização e treinamento
Privacidade
Legislação e Marcos Regulatórios
Coordenação e Protocolos
Combate ao Crime Cibernético
Cooperação Internacional
Combate a ameaças cibernéticas
Pesquisa e Desenvolvimento
Economia Digital
Parceria Público-Privada
STRATEGIC OBJECTIVES

16. STRATEGIC OBJECTIVES
100%
90%
30%
90%
30%
60%
80%
40%
50%
30%
50%
30%
20%
0% 10% 20% 30% 40% 50% 60% 70% 80% 90% 100%
Objetivos Estratégicos Definidos
Proteção de infraestruturas críticas
Certificações e Padrões
Conscientização e treinamento
Privacidade
Legislação e Marcos Regulatórios
Coordenação e Protocolos
Combate ao Crime Cibernético
Cooperação Internacional
Combate a ameaças cibernéticas
Pesquisa e Desenvolvimento
Economia Digital
Parceria Público-Privada
STRATEGIC OBJECTIVES

17. STRATEGIC OBJECTIVES
Awareness and
Training
Critical Infrastructure
Protection
Coordination and
framework
Cyber law and
legislation
Research and
Development
International
cooperation
1
2
3
4
5
6

18. COMMON TOPICS

19. TEMÁTICAS SIMILARES
The following categories were found:
• State and non-state threats (2),
• Hacktivism (2),
• Cyber crime (7),
• Cyber Terrorism (3),
• Espionage (3) e
• Sabotage (3).
CYBER THREATS: particularly
cyber crime
PRIVACY PROTECTION
ON-LINE1 2
Latin american NCSS (8) assigned
privacy and intimacy as human
right/constitutional protection to be
protected. Even at the expense of state
power to intercept communications

20. CONCLUSION

21. CONCLUSION
Internaitonal Cooperation
Sharing resilience plans and/or
joint training for Critical
Infrastructure
Critical Infrastructure
Protection
1
Exchange of information,
Budapest Convention (other
regional arrangement)
Coalition to fight Cyber
Crime
2
Internaitonal Cooperation

22. QUESTIONS?
Eduardo Izycki
Cybersecurity Researcher
linkedin.com/in/eduardoizycki
eduizycki@yahoo.com.br