Accessibility

Voices of Her CyberTracks: Jhoycy Santos on Building a Collective Digital Security Culture

“Simplifying the technical language of cybersecurity to bring society closer to this topic is an essential role that can be fostered by organizations like LAC4. Digital security should not be just a matter for specialists; it should be a collective commitment,” says Jhoycy Santos, a Brazilian participant of the program, in her interview with LAC4 ahead of the in-person meeting in September in Santo Domingo. With a background in civil engineering and public service, and active work in the cybersecurity and operations area at the National Education Development Fund (FNDE), she shares how technology has become a tool to strengthen digital security and ensure the effectiveness of public policies. 

You applied to the program a while ago – what caught your attention and what drove you to sending your application? 

My path to cybersecurity began to take shape when, as a public servant, I received an important new challenge: to take on responsibilities related to Cybersecurity and Data Privacy. This assignment placed me in a professional universe different from my original training, which sparked an intense motivation to seek knowledge and improve my skills in this critical field. 
 
Throughout this learning journey, I was introduced to a network of professionals and public servants dedicated to digital security and privacy. It was in this collaborative environment, where the exchange of knowledge is constant, that I discovered the Her CyberTracks program. The possibility of deepening my skills and connecting with other women in the area was what most caught my attention. 
 
The decision to enroll was solidified with the support of my superior, who saw in Her CyberTracks an essential opportunity for my professional development. Together, we recognized that the program would be a fundamental step to mature my competence and, consequently, contribute more significantly to the future of public policy. Participating in Her CyberTracks is, for me, an opportunity to build a solid knowledge base and collaborate with the mission of strengthening digital security in the public sector. 


 
Her CyberTracks program is more than half way through since its start in April, and we are going to meet soon in Santo Domingo for in-person training. How has it been so far? 

The experience has been challenging, which makes the whole process very motivating. Her CyberTracks has been a place to step out of my “comfort zone,” presenting concepts, principles, techniques, and tools that add substantially to my professional and personal life. 
 
As an example, I can mention the introduction to digital forensics practices, a topic I had not yet explored in my daily routine, but which certainly broadens the understanding of incident investigation and mitigation. It demonstrated the real-world application of best practices and the need for this knowledge to work in Cybersecurity. 
 
This entire context shows how beneficial my participation in the project has been for fulfilling the objectives set for my work. 
 
My expectations are being exceeded: I hope that the training in Santo Domingo will also be an opportunity for exchanging experiences, networking, and cooperation between different countries in the region, in addition to consolidating the knowledge already acquired.


Given your background, what do you think are the greatest challenges in cybersecurity right now? What do you see in your daily work? 


I believe the most vulnerable link in the security chain is still the human being. Often, advanced policies, tools, and protocols are implemented, but human failures—due to lack of knowledge or a poor perception of risk—end up weakening the entire system. 
 
One of the major challenges is precisely to strengthen a digital security culture within organizations. In addition to technical training, it is essential to invest in continuous awareness, sensitization, and training for all employees, regardless of their hierarchical level. 
 
Personally, I seek to contribute to this strengthening by creating accessible communication practices and guidelines that bring people closer to digital security, so they do not feel intimidated but rather engaged in adopting secure habits. 


 
Drawing from your experience, how international organisations like the EU and ITU or initiatives like the LAC4 Centre could help to address these challenges? 

The Her CyberTracks initiative is, in itself, a transformative example: encouraging the participation of women in the area not only strengthens inclusion and diversity but also expands the number of professionals prepared for the sector’s challenges. 
 
I believe it is fundamental that international organizations continue to invest in talent development, creating accessible and practical programs that unite different cultures and contexts. Furthermore, they can play a decisive role in stimulating the creation of public policies, promoting partnerships between countries, and disseminating best practices in digital security culture. 
 
Simplifying the technical language of cybersecurity to bring society closer to this topic is another essential role that can be fostered by these organizations. Digital security should not be just a matter for specialists; it should be a collective commitment. 

About Jhoycy Santos

I was born in a small town in the countryside and, from an early age, I learned the value of education from my mother. Every stage of my life has confirmed this transformative journey: education, in fact, changes lives—and it changed mine.

It led me to the capital, where I graduated with a degree in Civil Engineering and began my life in public service. After being approved in my first public examination, I worked in the financial area for almost four years. During my career, I also specialized in Strategic Management and Financial and Budgetary Management in Public Organizations. More recently (2024), I joined as a Specialist in Financing and Execution of Educational Programs and Projects at the National Education Development Fund (FNDE), an institution responsible for implementing some of Brazil’s most relevant educational programs, such as school meals, school transportation, and the distribution of textbooks.

Currently, I work in the Directorate of Technology and Innovation (DIRTI), more specifically in the cybersecurity and operations area. I see daily, in practice, how digital security is fundamental to guaranteeing the effectiveness of public policies that transform lives.

I believe in the power of education, but above all, I recognize that every achievement was only possible with God’s hand guiding my path.

Her CyberTracks is funded by the Federal Foreign Office of Germany  and the European Union and co-implemented by the Deutsche Gesellschaft für internationale Zusammenarbeit (GIZ) and the International Telecommunication Union (ITU), in partnership with the Global Programme on Cybercrime of the United Nations Office on Drugs and Crime (UNODC) for the Criminal Justice CyberTrack and the Latin America and Caribbean Cyber Competence Centre (LAC4) for the LAC region. Read more about the program.


Keep reading similar articles
Memorandum of Understanding Between the Andean Community and LAC4

LAC4 and General Secretariat of the Andean Community signed a memorandum of understanding on 13 May 2026 in Lima, Peru that provides a framework for collaboration related to cybersecurity and digital transformation between LAC4 and the Andean Community and its members.

Supporting Cyber Resilience of Electoral Processes in Colombia

LAC4 supported information security and cyber resilience for electoral processes in Colombia with a three-day training for electoral authorities and relevant stakeholders to strengthen the capacity to protect electoral infrastructure, manage cyber risks and respond to incidents during elections ahead of Colombia’s presidential elections at the end of May 2026.

Sharing Best Cybersecurity Practices in Peru

LAC4 organised a training on cybersecurity and cyber hygiene for the staff of the General Secretariat of the Andean Community to improve understanding of modern cybersecurity risks, promoting secure digital practices and enhancing awareness of how cyber incidents can impact organisational operations, reputation and continuity.

Andean Region SME Training Concluded with Self-Reflection for Improving Cyber Resilience

The three-day training for small- and medium enterprises in Andean region concluded with participants’ presentation on how to improve their business resilience.

Day 2 of Andean Region SME Training: Understanding Data Protection and Supply Chain Security

Second day of cybersecurity training for Andean region small- and medium enterprises focused on data protection, Zero Trust principles and supply chain security.

Day 1 of Andean Region SME Training: Building Foundations for Cyber Resilience

First day of the cybersecurity training for Andean region small- and medium enterprises focused on building foundations and understanding of cyber resilience, understanding cyber risks and discussing cyber risk management.