Torre YPF was the venue of the Workshop on Assessment of the Maturity of the Cybersecurity Process in Industrial Organizations organized by ARPEL and the Industrial Cybersecurity Center (CCI) at the end of May.

Thirty-five professionals from Argentina and Uruguay attended the workshop on behalf of Accenture, Ancap, Axion Energy, Enersa, Logicalis Argentina, Oldelval, Pampa Energía, Prisma Medios de Pago S.A., TGN and YPF.

The workshop was given by the Director of CCI, José Valiente, the Vice President of CCI, Miguel García-Menéndez, and the General Coordinator of CCI for Latin America, Claudio Caracciolo.

Its objective was to provide attendees with the knowledge required to determine the degree of maturity of an industrial organization in the field of cybersecurity, with regard to the requirements of the organization, identifying the main security breaches and making comparisons between different organizations in terms of the maturity of their cybersecurity capabilities in order to achieve a level of excellence in risk management.

Valiente defined the assessment of the level of industrial cybersecurity in an organization as something important “to know at what level we are, the lack of capacity to be remedied and what type of actions the organization should take to improve its cybersecurity."

The tool, developed by CCI, consists of a small manual guide and a spreadsheet. It evaluates 122 objectives embodied in a three-dimensional approach according to Process Areas, Maturity Levels and Activities. Each objective falls within a Process Area, divided into Strategy, Assets, Risks, Accesses, Configuration, Operation, Organization and Continuity. In addition, each objective has a Maturity Level (Initial, Managed, Standardized or Optimized) and forms part of an Activity: Definition, Communication, Assignment, Development and Audit. Once the ratings of the maturity level of each objective have been entered, the tool provides results that allow us to know the level of industrial cybersecurity and the criteria to improve it.

ARPEL has a Working Group specifically devoted to industrial cybersecurity. If you have any questions, please contact us by email at hvazquez@arpel.org.uy