The role of the private sector in the new General Direction of Cybersecurity

By Ana Cecilia Pérez

Key organizations such as the Mexican Association of the Information Technology Industry (AMITI), the Association of Banks of Mexico (ABM), the Mexican Association of Insurance Institutions (AMIS), the National Chamber of the Electronics, Telecommunications and Information Technology Industry (CANIETI), the Consejo Coordinador Empresarial (CCE), the Asociación de Internet MX, the Asociación Nacional de Universidades e Instituciones de Educación Superior (ANUIES) and the Alianza México Ciberseguro must position themselves quickly to ensure that this new General Directorate of Cybersecurity considers their specific needs and challenges.

In terms of:

1. Governance and transparency is important:

• The creation of a Public-Private Coordination Committee on Cybersecurity to ensure fluid communication and an aligned strategy between the government and the business sector.
• The requirement for transparency in the decisions and regulations implemented by the General Directorate, to avoid a politicized or surveillance approach to the detriment of the real protection of data and infrastructure.

2. Critical Infrastructure Security and Incident Response

• Clearly define which sectors are considered digital critical infrastructure, ensuring that the financial sector, insurance, telecommunications, manufacturing and healthcare are on the priority protection list.
• Establish a direct communication channel for real-time notification of cyber-attacks, ensuring that companies can collaborate with management in containing incidents.

Talent and skills development

• Creation of tax incentives for companies that invest in cybersecurity training and adopt advanced digital protection technologies.
• Promotion of cybersecurity certification programs in universities and technical education centers to address the talent deficit in the country.