Cybersecurity Policy Report, Input Sought on Chile’s Proposed Cybersecurity Standards, (Jun 2, 2026)

By Tony Foley

Chile’s National Cybersecurity Agency (ANCI) has called for a public consultation to establish mandatory standards for cybersecurity drawn from a document released in January outlining the agency’s basics of cybersecurity to be implemented to prevent cyber attacks.

ANCI said in a news release yesterday that the consultation was designed to gather feedback on its intention to make six of the “9 basics of cybersecurity” mandatory for organizations subject to Law No. 21.663, the Framework Law on Cybersecurity and Critical Information Infrastructure, which took effect in January 2025. These basics include regular application of updates, recurring training, minimization of access privileges, regular information backups, secure networks, secure devices, real-time monitoring, use of multifactor authentication, and use of a password manager.

The six proposed mandatory measures, which are not specified in the report but which are outlined in detail in the query form, were selected based on an analysis of incidents reported to the ANCI in 2025 that were analyzed to identify effective controls for prevention. The agency said that proper implementation of the measures would prevent a significant number of attacks, contributing to strengthened institutional and organization resilience.

Individuals and cybersecurity officers may submit comments on the ANCI portal, which requires a login, through June 29. In addition to the details of the six proposed controls under consideration, the form includes definitions and initial implementation proposals.

News: InternationalLegislation DataSecurity