National Cybersecurity Policy 2023-2028
Analysis of the Action Plan approved by the Interministerial Committee on Cybersecurity, establishing 15 strategic measures to strengthen the country's digital resilience and protect national critical infrastructure.
Last updated:
This page walks through the Action Plan of the National Cybersecurity Policy 2023-2028: the legal framework behind it, the 15 strategic measures and their owners, the cross-cutting and central objectives, and the governance led by the Interministerial Committee and ANCI. At the close are the frequently asked questions and the official resources.
Regulatory Framework and Context
The starting point is the resolution approving the Action Plan and the rules that support it.
Through Exempt Resolution No. 28 of July 11, 2025, the National Cybersecurity Agency implemented the agreement of the Interministerial Committee on Cybersecurity that approves the Action Plan of the National Cybersecurity Policy 2023-2028.
Legal Basis
- Law No. 21,663: Cybersecurity Framework
- Supreme Decree No. 164/2023: Approves the National Cybersecurity Policy 2023-2028
- Supreme Decree No. 275/2024: Regulation of the Interministerial Committee on Cybersecurity
The Action Plan is the result of work carried out by the Interministerial Committee during the 2022-2024 period, where 76 measures were analyzed, selecting 15 based on their implementation feasibility and applicability in the 4 cross-cutting axes of the National Policy.
That framework translates into a defined set of measures, each with an identified owner.
The 15 Strategic Measures of the Action Plan
The Plan establishes concrete measures distributed across different critical areas for strengthening national cybersecurity:
- Generation of Guides and Instructions to support SABs
Guidance to State Administration Bodies on cybersecurity matters, facilitating understanding and information security.
Responsible:Undersecretariat of Finance/Digital Government Secretariat
Objectives:National coordination · Cybersecurity culture
- Diagnostic report on R&D&I in cybersecurity
Preparation of the second report on R&D&I in cybersecurity to determine key research areas that Chile should prioritize.
Responsible:Ministry of Science, Technology, Knowledge and Innovation / ANID
Objectives:Cybersecurity culture · Industry promotion
- Focus on scholarships in cybersecurity matters
Deliver a maximum of 30 scholarships for talent training in cybersecurity through focusing processes in priority areas.
Responsible:Ministry of Science, Technology, Knowledge and Innovation / ANID
Objectives:Cybersecurity culture · Scientific research
- Technical Standard for Cybersecurity in the Electric Sector
Development of regulatory framework with general Cybersecurity foundations for electric companies.
Responsible:Ministry of Energy / CNE / National Electric Coordinator
Objectives:Resilient infrastructure · National coordination
- Cybersecurity risk assessment methodology
Development of methodology adapted to national reality, available for all organizations in the country.
Responsible:National Cybersecurity Agency
Objectives:Resilient infrastructure · Cybersecurity culture
- Promote cybersecurity exercises
Exercise instances for public institutions in collaboration with national and international organizations.
Responsible:National Cybersecurity Agency
Objectives:Resilient infrastructure · Industry promotion
- Manual of communication protocols for incidents
Establish baseline guidelines for both internal and external communication in cybersecurity incident situations.
Responsible:ANCI / Ministry Secretary of Government (SECOM)
Objectives:National coordination · People's rights
- Shared agenda of international commitments
Generation of consensual agenda between Ministry of Foreign Affairs and ANCI on international cybersecurity initiatives.
Responsible:Ministry of Foreign Affairs / ANCI
Objectives:International coordination
- Generation of annual national cybersecurity report
Annual report on national cybersecurity reality, threats, vulnerabilities of public systems.
Responsible:National Cybersecurity Agency
Objectives:Resilient infrastructure · National coordination
- Student cybersecurity fairs
Alliances with universities and technical institutes to hold fairs that showcase and raise awareness about cybersecurity careers.
Responsible:Ministry of Science / ANCI / Ministry of Education
Objectives:Cybersecurity culture · Industry promotion
- Proposal for new technical career in cybersecurity for TVHE
Creation of pilot proposal for Mid-Level Technical career for Technical-Vocational High School Education.
Responsible:ANCI / Ministry of Finance / Ministry of Education
Objectives:Cybersecurity culture · Industry promotion
- Development of document on research lines
Joint document between State and private sector with description of research areas in cybersecurity.
Responsible:ANID / National Cybersecurity Agency
Objectives:Industry promotion · Resilient infrastructure
- Expansion of the National Tutoring Plan program
Develop tutorials on digital education and self-care for people with greater support needs.
Responsible:Ministry of Science / ANCI / Ministry of Education
Objectives:People's rights · Cybersecurity culture
- Update of the Cyber Defense Policy 2024-2028
Update the Cyber Defense Policy published in 2018, presenting objectives until 2022.
Responsible:Ministry of Defense / Undersecretary of Defense
Objectives:Resilient infrastructure
- Cybersecurity requirements in public radio spectrum tenders
Establish compliance requirements for Exempt Resolution No. 1318 of 2020 on general cybersecurity foundations.
Responsible:Undersecretary of Telecommunications
Objectives:Resilient infrastructure · Cybersecurity culture
The measures do not operate in isolation: they respond to cross-cutting axes and central objectives.
Cross-cutting Objectives
The National Cybersecurity Policy 2023-2028 considers 4 fundamental cross-cutting axes that guide all measures:
Cross-cutting Axes
- Gender Equity: Inclusion of gender perspective in all initiatives
- Child Protection: Specific measures to protect minors in cyberspace
- Senior Protection: Special considerations for the elderly
- Environmental Protection: Sustainable and green cybersecurity
Central Objectives
The measures align with the following central objectives:
- National and international coordination: Strengthen cooperation between public and private institutions
- Cybersecurity culture: Promote awareness and education in digital security
- Resilient infrastructure: Protect essential services and critical infrastructure
- Promotion of industry and scientific research: Drive the development of the cybersecurity ecosystem
- People's rights: Protect fundamental rights in cyberspace
Delivering all of the above rests on a defined institutional governance.
Implementation and Governance
Who leads the Policy, through which committee and over what period.
Interministerial Committee on Cybersecurity
The Committee is composed of representatives from:
- Undersecretariat of the Interior
- Undersecretariat General Secretariat of the Presidency
- Undersecretariat of Defense
- Undersecretariat of Foreign Affairs
- Undersecretariat of Finance
- Undersecretariat of Telecommunications
- Undersecretariat of Science, Technology, Knowledge and Innovation
- National Intelligence Agency
- National Cybersecurity Agency (presides)
Role of ANCI
The National Cybersecurity Agency, under the direction of Daniel Álvarez Valenzuela, chairs the Committee and implements the adopted agreements, coordinating the actions of institutions with competence in cybersecurity matters.
Implementation Timeline
The Action Plan will be executed during the 2023-2028 period, with periodic reviews and adjustments according to the evolution of the threat landscape and national needs.
The scope of the Action Plan can be summed up in a few figures.
The Action Plan, in figures
Figures drawn from the Action Plan and the National Cybersecurity Policy 2023-2028.
Frequently asked questions
The most frequent questions about the National Cybersecurity Policy and its implementation.
What is Chile's National Cybersecurity Policy 2023-2028?
It is the public-policy instrument approved by the Interministerial Cybersecurity Committee setting Chile's strategic guidelines on digital matters. It defines five objectives and thirty-nine concrete measures for 2023-2028, aligned with Law 21.663 and the ANCI framework.
Who approves and executes the National Cybersecurity Policy?
It is approved by the Interministerial Cybersecurity Committee and executed by the National Cybersecurity Agency (ANCI), coordinated with sectoral ministries, regulators and private entities qualified as Essential Services and Operators of Vital Importance.
How does the Policy relate to Law 21.663?
The Policy guides the operational implementation of the Cybersecurity Framework Law. Law 21.663 creates ANCI, sets obligations and sanctions; the Policy prioritises measures, deadlines and indicators that materialise that legal framework over 2023-2028.
What concrete obligations does it impose on companies?
Companies qualified as Essential Services or Operators of Vital Importance must implement security-management systems, report incidents to ANCI, appoint a Cybersecurity Delegate and participate in sectoral exercises. The Policy reinforces public-private cooperation in these areas.
How is compliance with the Policy measured?
ANCI publishes periodic progress reports by objective and measure, with quantitative and qualitative indicators. The thirty-nine measures have associated deadlines and identified institutional owners, enabling public tracking of the implementation level.
Resources and Related Links
Transform Your Legal Challenges into Competitive Advantages
Discover how our innovative approach can drive your business
