Digital security and MSPI

What it sets out

• §Ensure digital security and data protection when delivering services.
• §Prevent risks and ensure continuity in the face of incidents.
• §Implement the Information Security and Privacy Model (MSPI).
• §Apply the website digital security measures in Annex 3 of Resolution 1519 of 2020.

Official source: MinTIC — Decree 767 of 2022 overview

Common gaps

• ☐Outdated servers and content management systems.
• ☐Missing security headers on the portal.
• ☐No asset inventory or incident response plan.

What we deliver

• ☑Exposed surface assessment.
• ☑Portal and server hardening.
• ☑Inputs for the MSPI (assets, risks and controls).
• ☑Incident response procedure.