National Cybersecurity Policy 2023-2028
Analysis of the Action Plan approved by the Interministerial Committee on Cybersecurity, establishing 15 strategic measures to strengthen the country's digital resilience and protect national critical infrastructure.
Regulatory Framework and Context
Mediante Exempt Resolution No. 28 del 11 de julio de 2025, la Agencia Nacional de Ciberseguridad implementó el acuerdo del Comité Interministerial sobre Ciberseguridad que aprueba el Action Plan of the National Cybersecurity Policy 2023-2028.
Legal Basis
- Law No. 21,663: Cybersecurity Framework
- Supreme Decree No. 164/2023: Approves the National Cybersecurity Policy 2023-2028
- Supreme Decree No. 275/2024: Regulation of the Interministerial Committee on Cybersecurity
The Action Plan is the result of work carried out by the Interministerial Committee during the 2022-2024 period, where 76 measures were analyzed, selecting 15 based on their implementation feasibility and applicability in the 4 cross-cutting axes of the National Policy.
The 15 Strategic Measures of the Action Plan
The Plan establishes concrete measures distributed across different critical areas for strengthening national cybersecurity:
Generation of Guides and Instructions to support SABs
Diagnostic report on R&D&I in cybersecurity
Focus on scholarships in cybersecurity matters
Technical Standard for Cybersecurity in the Electric Sector
Cybersecurity risk assessment methodology
Promote cybersecurity exercises
Manual of communication protocols for incidents
Shared agenda of international commitments
Generation of annual national cybersecurity report
Student cybersecurity fairs
Proposal for new technical career in cybersecurity for TVHE
Development of document on research lines
Expansion of the National Tutoring Plan program
Update of the Cyber Defense Policy 2024-2028
Cybersecurity requirements in public radio spectrum tenders
Cross-cutting Objectives
The National Cybersecurity Policy 2023-2028 considers 4 fundamental cross-cutting axes that guide all measures:
Cross-cutting Axes
- Gender Equity: Inclusion of gender perspective in all initiatives
- Child Protection: Specific measures to protect minors in cyberspace
- Senior Protection: Special considerations for the elderly
- Environmental Protection: Sustainable and green cybersecurity
Central Objectives
The measures align with the following central objectives:
- National and international coordination: Strengthen cooperation between public and private institutions
- Cybersecurity culture: Promote awareness and education in digital security
- Resilient infrastructure: Protect essential services and critical infrastructure
- Promotion of industry and scientific research: Drive the development of the cybersecurity ecosystem
- People's rights: Protect fundamental rights in cyberspace
Implementation and Governance
Interministerial Committee on Cybersecurity
The Committee is composed of representatives from:
Role of ANCI
The National Cybersecurity Agency, under the direction of Daniel Álvarez Valenzuela, chairs the Committee and implements the adopted agreements, coordinating the actions of institutions with competence in cybersecurity matters.
Implementation Timeline
The Action Plan will be executed during the 2023-2028 period, with periodic reviews and adjustments according to the evolution of the threat landscape and national needs.
Resources and Related Links
Transform Your Legal Challenges into Competitive Advantages
Discover how our innovative approach can drive your business
