The National Cybersecurity Coordination, a unit of the Undersecretary of the Interior responsible for coordinating the actions of public agencies in cybersecurity and recommending to the President of the Republic policies, laws, regulations, protocols and standards in this area, recently put two of a series of regulations required by Law No. 21,663 Framework on Cybersecurity up for public consultation.
Specifically, the following draft regulations have been submitted for public consultation:
- Regulation on Cybersecurity Incident Reporting
- Regulation on the Qualification of Operators of Vital Importance
The purpose of the Regulation on Cybersecurity Incident Reporting is to regulate in greater depth the obligation of Essential Service Providers and Operators of Vital Importance to report cyberattacks and cybersecurity incidents with significant effects to the National CSIRT, providing criteria to qualify their reportability, establishing a reporting platform, and establishing the taxonomy of the reports that must be sent, among others. For its part, the Regulation on Qualification of Operators of Vital Importance aims to regulate the qualification procedure of these obliged subjects, establishing deadlines, stages and possibilities of participation for those affected by this qualification, as well as third parties.
The public consultation aims to collect opinions, suggestions and improvement proposals on the regulations proposed by the National Cybersecurity Coordination. This public consultation has been available since July 31, 2024, and is open to all individuals, including representatives of social organizations, civil society, academia and private individuals who wish to provide their feedback.
Observations on the proposed regulations must be submitted to the National Cybersecurity Coordination through the forms available at the following links:
- Public Consultation: Incident Reporting Regulation
- Public Consultation: OIV Qualification Regulation
The deadline to submit comments or observations on each of the proposed regulations articles is Monday, August 12, 2024.
