Participants explored the importance of establishing clear legal structures to strengthen cybersecurity governance, including defining responsibilities for regulated actors and ensuring the protection of critical infrastructure. The seminar also emphasized the role of compliance and enforcement mechanisms, underlining that effective oversight and sanctions are essential for ensuring that regulations are properly implemented. 

In addition, the discussion stressed the importance of regional cooperation and multi-stakeholder dialogue, showing how collaboration between governments, specialized institutions, and other stakeholders can help reduce regulatory fragmentation and foster more coordinated approaches to cybersecurity. 

Most important takeaways from the seminar: 

• The reality in the LAC4 region is the lack of a legal framework that would allow for the protection of legal interests, particularly those related to cybersecurity. 

• One of the major challenges in the Latin American region is conceptual: a lack of clear differentiation between cybersecurity and cyber resilience, as well as between cybercrime and broader cybersecurity issues. 

• It is essential to ask the right foundational questions in order to design a legal framework that reflects local realities while also fostering regional cooperation. 

• Chilean Law No. 21,663, the Cybersecurity Framework, was the first cybersecurity law in Latin America. One of the most notable aspects of this legislation is the obligation to report cybersecurity incidents, as well as the imposition of significant financial penalties. 

• Three systemic gaps have been identified in Latin America: a conceptual gap, stemming from the use of different languages and concepts across countries; a regulatory gap, characterized by the absence of preventive frameworks with clear competencies, verifiable standards, and legal obligations for risk management; and an operational gap, reflected in the limited capacity for coordination and interoperability among the various actors involved in cybersecurity. 

• Ten key pillars are identified for creating a robust regulatory framework and achieving an adequate level of cybersecurity maturity in countries: national governance and coordination; government operational capabilities; risk management and digital hygiene; protection of critical infrastructure; incident reporting and management; product security and certification; international cooperation; public procurement and promotion; transparency and budgeting; and the definition of responsibilities and a penalty system. 

• The ten pillars and principles provide a useful foundation for internal discussions, as they help shape or evaluate national cybersecurity models and frameworks. 

• When one company supports another in addressing vulnerabilities, the entire sector is significantly strengthened. 

• Continuous monitoring of the regulatory framework is essential to ensure it remains up to date and effective. 

The 10th LAC4 members-only seminar was delivered by Daniela Procházková from NÚKIB, Jersain Zadamig Llamas Covarrubias, and Juan Pablo González Gutiérrez, and featured opening remarks by the  Regional Project Officer at the European Union Delegation in Costa Rica, Willy Carvajal and the LAC4 Regional Manager, César Moliné. 

LAC4 remains committed to supporting its members in strengthening their cybersecurity governance capacities through the development of coherent legal frameworks and enhanced regional cooperation. The seminar brought together 131 stakeholders and policymakers from LAC4 participant nations and focused on advancing a common legal architecture adapted to regional realities, while aligning with international standards. It was specifically designed for cybersecurity stakeholders and policymakers from member countries, including Antigua and Barbuda, the Bahamas, Chile, Colombia, Costa Rica, the Dominican Republic, Ecuador, El Salvador, Estonia, Guatemala, Honduras, the Netherlands, Panama, and Uruguay, as well as representatives from RedCLARA, Cyber 4.0: Cyber Competence Center (Italy), and NUMU Group.