News
What was reported
Emisoras Unidas reported on July 31, 2026 that bill 6771, sponsored by congressman Edin de Jesús Mejía, seeks to establish a National Cybersecurity System. Its points include: a national cybersecurity body under the Ministry of the Interior to coordinate strategy and oversee compliance; the creation of CSIRT-GT to receive reports and coordinate technical responses; and an obligation for public entities and critical infrastructure operators to implement cyber risk management systems, periodic audits and strengthening of their platforms. The bill was referred to the Communications, Transport and Public Works Committee for a report.
Analysis
What it means for the private sector
If it advances on those terms, companies that operate critical infrastructure —energy, telecommunications, finance, transport and others, depending on the definition the law adopts— would be the first to face formal obligations. Their suppliers would likely also receive derived contractual requirements.
Opinion
Our perspective
A national CSIRT with a clear mandate would be a step forward in coordinating responses. The challenge will be for the law to be technically sound, protect fundamental rights and not end up, as in 2022, shelved because of drafting problems.
Conclusions
Preparing today with risk management and audits is the best way to comply tomorrow.
Frequently asked questions
What is a CSIRT?
A computer security incident response team: it receives reports, analyzes threats and coordinates the technical response to incidents.
Sources
Bring this topic to your organization
The Seguridad 360 Course turns these ideas into habits. Next edition: October 31, 2026 (taught in Spanish).