More than 110 professionals from Ancap, Ecopetrol, Enap, EP Petroecuador, Honeywell, Petroperú, Recope, Tema, TGN, TGP, YPF and YPFB, among other companies in the region, participated in the webinar held at the end of August entitled “Designing a matrix of Roles and Responsibilities in Industrial Cybersecurity”.

The technical activity, promoted by the Arpel Industrial Cybersecurity Committee, featured a presentation by José Valiente, director of the Industrial Cybersecurity Center of Spain, and aimed to present the preliminary steps to create a matrix, along with the essential roles and best practices to ensure it is clear, understandable and accepted by all departments involved. Useful mechanisms and tools for their management and maintenance were also addressed.

As explained in the webinar, it is essential to establish matrices of roles and responsibilities for the management of cybersecurity incidents and business continuity, and for this matrix to be effective it is critical to identify the processes, those responsible, and the technologies involved.

Valiente noted that the role matrix must be adapted to the specific capabilities of each plant to ensure that responsibilities are aligned with the skills of the staff.

Another aspect highlighted by the expert was that the matrix of roles and responsibilities promotes collaboration between areas and fosters a security culture essential for resilience against cyber threats.

In closing, he maintained that the role matrix must be dynamic and reviewed periodically to adapt to organizational and regulatory changes.

Link to the full recording of the webinar: https://www.youtube.com/watch?v=SVXoScHuZ4A&t=459s