As part of Cybersecurity Month, we invite you to read the column by our Director of New Technologies and AI, Juan Pablo González, on the importance of prevention and preparedness in the face of cyberattacks.
October, designated Cybersecurity Month by Law No. 21,113, takes on special significance in 2026. Awareness-raising, coordination, and incident preparedness activities provide an opportunity to remember that cyberattacks are no longer a problem limited to computer systems. Today, they can compromise essential services, affect people’s health, and paralyze entire operations.
A few days ago, we learned of a cyberattack on a European supermarket chain that, according to reports, affected temperature control systems. Consequently, the risk was not limited to the potential exposure of customers’ personal data; it also raised concerns about possible food spoilage, health issues, and supply chain disruptions. This example illustrates an increasingly evident reality: when technology underpins physical processes, a digital failure can have very concrete consequences beyond cyberspace.
Added to this is artificial intelligence. The very tools that help detect anomalies and strengthen defenses can be used by attackers to identify vulnerabilities, automate intrusion attempts, and craft more convincing deceptions. This does not mean that every threat is new, but rather that their speed and scale are increasing considerably. For this reason, reacting after an incident is no longer a strategy limited to the cybersecurity or IT security departments.
Cybersecurity must occupy a permanent place on the board’s agenda. Not only because of the penalties that may result from regulatory noncompliance, but also because operational continuity, the safety of customers and employees, and, ultimately, trust are at stake. A board should know what the organization’s critical processes are, what would happen if they were disrupted, and how long it would take to recover them.
Chile now has a functioning National Cybersecurity Agency and a regulatory framework that raises management standards. At the same time, evolving regulations on personal data and the debate surrounding artificial intelligence are forcing companies to prepare without waiting for every regulatory detail to be resolved. Complying with the law is essential, but resilience requires going beyond formal compliance.
This effort starts with people. Training cannot be reduced to an annual talk or simply reminding people not to open suspicious links. It must include response exercises, clear responsibilities, reporting channels, and practices that allow us to measure whether organizational environments are truly prepared for this dynamic landscape. It also requires involving vendors and third parties, because as we have seen recently, a cyber incident can spread throughout the entire value chain.
Cybersecurity Awareness Month provides an opportunity to conduct a thorough analysis of our internal processes, enabling us to respond not only by preventing an attack but also by knowing how to continue operating and protecting people when one does occur. Investing in prevention, coordination, and resilience ultimately means investing in business continuity and the trust of all stakeholders. This must become a commitment from the board of directors for the entire organization; therefore, in a landscape of evolving cyber threats, preparedness is our greatest assurance.
Column written by:
Juan Pablo González | Director of New Technologies and AI | jgonzalez@az.cl
