What is interesting is that companies' interest in deploying cybersecurity strategies also focuses on their commercial objectives and levels of competitiveness.<\/p>\n\n\n\n
Proof of this is that the 50% of Latin American companies report a total investment in cybersecurity of between 10 and 49 million dollars<\/a>.\u00a0<\/p>\n\n\n\n In Argentina, the 63% of companies implement cybersecurity tools<\/a>.\u00a0\u00a0<\/p>\n\n\n\n While according to data shared by consultant Victor Ruiz in Infobae<\/a>, 80.1% of people would stop purchasing products or services from a brand after a security incident<\/strong>.\u00a0<\/p>\n\n\n\n To understand this context in greater depth, we share an exclusive conversation with Salvador Vial<\/a>, Principal Executive Security Advisor and Field CISO of Amazon Web Services (AWS)<\/a>.<\/p>\n\n\n\n Together with him, we analyzed in detail the Challenges that organizations face in terms of cybersecurity<\/strong>, what are the most common cyberattacks and recommendations to improve resilience to this type of attack. <\/p>\n\n\n\n We also focused on the role that artificial intelligence plays in cybersecurity strategies, and the problem linked to the lack of professionals that the sector is experiencing.<\/p>\n\n\n\n We also discuss the concept of security by design, and share some insights into the interesting career of our interviewee.<\/p>\n\n\n\n Salvador's career began and continued over the years as a path of discovery. A multifaceted journey, which would lead to his consolidation as one of the Latin America's leading cybersecurity specialists<\/strong>.<\/p>\n\n\n\n In his early youth he chose to study electricity and electronics. At that time - 23 years ago - university courses linked to the field of technology were exclusively computer engineering courses oriented towards programming. <\/p>\n\n\n\n An area of expertise that was not of interest to him. He did not see himself programming all day.<\/p>\n\n\n\n This acquisition of theoretical knowledge and practical skills related to the design of electronic circuits - such as soldering boards - and working with motors and capacitor banks, together with power factor correction, was very useful to him years later, in the data center management<\/a>.<\/p>\n\n\n\n Salvador's exploration also included CAD design programs for making electrical drawings, automation and control projects, and PLC systems. <\/p>\n\n\n\n All this background gave him a different perspective on how to manage emerging technologies.<\/p>\n\n\n\n The next step was to study network and telecommunications administration. But after completing that degree, he began working in a software quality assurance position. A position that was not related to networks. <\/p>\n\n\n\n \u201cHaving a broader knowledge can be a differentiator, but you have to be lucky enough to be able to exploit it,\u201d he says. <\/p>\n\n\n\n In fact, he did not have the opportunity to apply his electrical knowledge until 15 years after having acquired it, when he began working for an electrical distribution company.<\/p>\n\n\n\n \u201cObviously everything is useful, it gives you another perspective. But you won't necessarily have to do a degree or study something and apply it directly,\u201d he points out.<\/p>\n\n\n\n Today, Salvador, who defines himself as a restless person who likes to do different things, is happy with his career and his present. Especially with the possibility of getting involved in various projects, which are being developed in different countries.<\/p>\n\n\n\n In the future, he is interested in delving deeper into international business based on the versatility that comes from interacting with actors from all over Latin America. <\/p>\n\n\n\n Now that we have met our protagonist, let's move on to the analysis of his area of expertise in which he stands out today at Amazon Web Services (AWS).<\/p>\n\n\n\n A cyber attack can be carried out in many ways, using a variety of tactics or techniques. These include blocking access routes to a system to prevent users from operating it. <\/p>\n\n\n\n The purpose of denying access may be to obtain secret, classified or commercial information, or even to extort an organisation so that it can regain access to its data by paying a ransom.<\/p>\n\n\n\n The range of cyber attacks is wide and As technology evolves rapidly, so do digital criminal gangs.<\/strong>. <\/p>\n\n\n\n \u201cMuch faster than private companies, and obviously faster than governments,\u201d says Salvador. In this regard, he points out that cybercriminals do not carry out bidding processes to buy tools. <\/p>\n\n\n\n \u201cThey don\u2019t spend six months buying a tool to help them defend themselves. They just pay a few dollars or cryptocurrency, get tools, and attack you. <\/p>\n\n\n\n It is much faster, much more agile the process they use. Whereas, On the side of those who defend, there are many administrative barriers that complicate<\/strong>", he warns. <\/p>\n\n\n\n At the end of the day, what matters comes down to three factors:<\/p>\n\n\n\n This set of factors shows the speed and pace of how a company is defending its technology assets and digital business processes. <\/p>\n\n\n\n There are three major cyber threats or cyber attacks, which are the most common and frequent: <\/p>\n\n\n\n 1) Phishing<\/strong>: It affects both corporations and users. It eventually leads to theft of information and subsequently to extortion. <\/p>\n\n\n\n 2) Ransomware<\/strong>: carries out a destructive process targeting an organization's data. It can lead to extortion and ransom demands. <\/p>\n\n\n\n 3) Denial of services<\/strong>: Block portals or applications so that they cannot be accessed. <\/p>\n\n\n\n In the case of cyberattacks that result in extortion, the objective is the promise to stop the attack if the criminals meet a demand, which may consist of the payment of a ransom. <\/p>\n\n\n\n Another motivation may be to undermine a company's ability to generate loss of trust and undermine its image. <\/p>\n\n\n\n For example, if a bank is suffering a cyber attack, those who use its platforms and applications will be unable to make money transfers and transactions. It could even impact the institution's credit cards or other systems.<\/p>\n\n\n\n It can also happen with a government or other type of company.<\/p>\n\n\n\n The key is to understand that the question is not whether an organization will suffer a cyber attack, but when and how you will experience it<\/strong>. And even more importantly, how prepared it is to withstand it and respond to its consequences.<\/p>\n\n\n\n In recent years, Latin America has been gaining relevance in the cyber threat landscape. <\/p>\n\n\n\n In 2023 it was positioned as the fourth most attacked region worldwide<\/a>, with Brazil leading at the regional level with 68% of cyberattacks, followed by Colombia (17%) and Chile (8%).\u00a0<\/p>\n\n\n\n The information comes from the report IBM X-Force Threat Intelligence Index 2024<\/a>, where it is reported that the cyber attacks with the greatest impact were the Data theft and data leakage, with 32% of incidents<\/strong>.<\/p>\n\n\n\n In fact, according to the report EY Global Cybersecurity Leadership Insights Study<\/a>, 62% of Latin American companies suffered some type of data breach<\/strong> over the past year.<\/p>\n\n\n\n Definitely, The level of cyber attacks that occur daily around the world is very high<\/strong>But the intensity varies according to the sectors.<\/p>\n\n\n\n In the case of financial institutions, which are the most commonly attacked organizations because they are big brands and process a lot of money, They can suffer 300 thousand attacks a month. All day, 24 hours a day.<\/strong>. <\/p>\n\n\n\n \u201cCriminals create automated robots that attack without resting, without blinking, and without eating,\u201d says Salvador.<\/p>\n\n\n\n To combat these threats, it is necessaryThey need technical tools, trained professionals and the money needed to acquire cybersecurity solutions.<\/strong>.<\/p>\n\n\n\n If we were to view the security strategy as a pyramid, all of these items would be at the base. <\/p>\n\n\n\n However, although it may be unnatural, what should be built first is not the base of the pyramid, but its head, based on two fundamental factors:<\/p>\n\n\n\n In short, the key is the people<\/strong> And while corporate leadership is moving forward in raising awareness of the critical role it must play in the face of cyber threats, the pace is still not optimal. <\/p>\n\n\n\n At this point it is also worth mentioning the importance of considering in cybersecurity strategies the Legal aspects related to cybersecurity and data protection<\/a>. <\/p>\n\n\n\n Just like the data governance<\/a>, as the set of processes, policies, standards and metrics, which focus on ensure the quality, availability, integrity and security of data<\/a> in an organization. <\/p>\n\n\n\n Even more so considering, as expressed in the whitepaper, Cybersecurity Futures 2030: New Foundations<\/a>, that cyber security will go from being about the protection of confidentiality and availability of the information to be protected<\/strong>, its integrity and origin.<\/p>\n\n\n\n Large corporations and business conglomerates are the organizations that today have the most developed defense capabilities against cyber attacks. <\/p>\n\n\n\n In particular, The financial industry, retail and mining companies stand out.<\/strong>.<\/p>\n\n\n\n There are other types of industries that have been left behind, such as airlines and hotels.<\/p>\n\n\n\n While relevant sectors such as health and education also need to significantly improve their protection.<\/p>\n\n\n\n As for people, there are two very important drivers that are not being well developed today:<\/p>\n\n\n\n In some organizations, there are leaders who believe that user experience and security are opposites. But it is quite the opposite. With Juan, we discovered that they do not need to be on opposite sides. <\/p>\n\n\n\n \u201cThe practice that should be used today in any institution that creates technology is the practice that in cybersecurity is known as security by design,\u201d he says. <\/p>\n\n\n\n Because, if an organizational culture includes security by design in all its processes, Cybersecurity factors will be included in the user experience roadmap<\/strong>.<\/p>\n\n\n\n However, there is a discussion among leaders about how to implement security by design, because in practice, different teams perform both functions.<\/p>\n\n\n\n So there are many issues of coordination, leadership and communication to be resolved. But the methodology exists and the key to how to put it into practice<\/strong>.<\/p>\n\n\n\n Cybersecurity strategies must be led by the corporate management of organizations. <\/p>\n\n\n\n You can have a great team of cybersecurity specialists, but, If the drive does not come from the top and if there is no solid plan, the company will not be able to meet its objectives.<\/strong>.<\/p>\n\n\n\n \u201cOften, specialists and middle managers have very good technical ideas about cybersecurity, about how to implement controls in different systems and processes, but they do not have the strength to be able to execute them,\u201d says Salvador.<\/p>\n\n\n\n Even if you have very good ideas, they will not be enough if you cannot obtain the appropriate budgets and ensure that all the teams in the organization are involved in the project. <\/p>\n\n\n\n In this context, It is important to have cybersecurity specialists who have the ability to implement the plan promoted by the management<\/strong>. <\/p>\n\n\n\n Always remembering that cybersecurity is not just a matter for the technical team. It obviously has to do with the technology area of an organization, but also with its business units. <\/p>\n\n\n\n Without this layer of articulation, technical teams would be disconnected from the reality of the company. <\/p>\n\n\n\n The artificial intelligence<\/a> can help speed up the process automation<\/a>For example, situations that previously had to be controlled by a person can now be validated automatically by robots.<\/p>\n\n\n\n An AI robot can be asked to review documentation or a specific process, among other tasks. It can even provide a report in real time, a task that would take a person several hours of work.<\/p>\n\n\n\n AI can help automate those types of tasks and collaborate to alleviate the lack of professionals that exists in the field of cybersecurity<\/strong>.<\/p>\n\n\n\n These automations will give teams more time to focus on tasks where they can add greater value, instead of reviewing routine processes. <\/p>\n\n\n\n There is a shortage of tens of thousands of cybersecurity specialists worldwide. This is a very large scale of unmet labour demand, and there is no way to fill the gap quickly. <\/p>\n\n\n\n "If we stick to the traditional way, for example, of training people in universities, it will probably take us 15 years to close the gap, and when we reach those 15 years we will have another gap, perhaps larger," warns Salvador.<\/p>\n\n\n\n One of the ways to alleviate this shortage of professionals is to focus on the methodological aspect. <\/p>\n\n\n\n In processes, in security by design and in organizational culture<\/strong>. <\/p>\n\n\n\n In contributing to ensuring that security issues are not perceived as matters exclusive to specialists but rather as an essential part of the business.<\/p>\n\n\n\n With the aim of reducing the technological talent gap, from IT Patagonia, together with our academic partner Codeki<\/a>, one of the most relevant educational technology companies in the market, We promote the development of multigenerational talent<\/a> to meet the needs of the industry.<\/p>\n\n\n\n The security approach must be shared by the entire organization. <\/p>\n\n\n\nA professional journey of multiple experiences with technology <\/strong><\/h2>\n\n\n\n
![\"Las](\"https:\/\/itpatagonia.com\/wp-content\/uploads\/2025\/02\/CIBERSEGURIDAD_imagen1--1024x389.png\")
What is a cyber attack?<\/strong><\/h2>\n\n\n\n
\n
What are the most common cyber attacks? <\/strong><\/h2>\n\n\n\n
What is the purpose of cyber attacks?<\/strong><\/h2>\n\n\n\n
![\"Los](\"https:\/\/itpatagonia.com\/wp-content\/uploads\/2025\/02\/CIBERSEGURIDAD-1024x389.png\")
What is the volume of cyberattacks?<\/strong><\/h2>\n\n\n\n
\n
![\"Las](\"https:\/\/itpatagonia.com\/wp-content\/uploads\/2025\/02\/CIBERSEGURIDAD_imagen3-copia-6-1024x389.png\")
Who is leading the way in terms of cybersecurity? <\/strong><\/h2>\n\n\n\n
\n
Security by design: How to make cybersecurity-friendly user experiences compatible?<\/strong><\/h2>\n\n\n\n
![\"La](\"https:\/\/itpatagonia.com\/wp-content\/uploads\/2025\/02\/CIBERSEGURIDAD_imagen4--1024x389.png\")
Recommendations to improve resilience to attacks<\/strong><\/h2>\n\n\n\n
What role does AI play in cybersecurity strategies? <\/strong><\/h2>\n\n\n\n
Is there a shortage of cybersecurity professionals?<\/strong><\/h2>\n\n\n\n
Conclusion <\/strong><\/h2>\n\n\n\n