Mexico Moves to Strengthen Cybersecurity With New National Plan and Law

Mexico has prepared a new legal and policy framework to upgrade its cybersecurity defenses. The plan sets out a national policy and a federal framework that will introduce mandatory guidelines, training for public servants, and incident-reporting rules.

Officials expect the new regulations to be published later this year.

The proposal also adds several strategic tools. These include an alert and vulnerability notification system, a National Cybersecurity Strategy, and a new General Cybersecurity Law.

Under the plan, Mexico will create key institutions to support these efforts. A National Cybersecurity Operations Center (CNSOC) and a National Incident Response Center (CSIRT) will be set up.

The government will also build an Inventory of Critical Infrastructure and launch a Vulnerability Assessment Program.

Heidy Rocha Ruiz, director general of cybersecurity, said the new model responds to global tensions, more sophisticated cybercrime, a shortage of skilled workers, and the rapid spread of AI. She noted that AI has increased digital threats but remains a crucial tool to fight them.

Rocha stressed that cybersecurity is a shared responsibility for government, industry, and academia. This plan, she said, introduces Mexico’s first cross-cutting cybersecurity policy to unite all sectors.

Mario Alberto Cortés, director of Strategy and Cybersecurity Governance at the ATDT, said cybersecurity is now part of Mexico’s wider digital transformation under the country’s Fourth Transformation agenda.

Consultants from the Inter-American Development Bank, Ariel Nowersztern and Jorge Mora de Flores, called the plan a holistic response to today’s challenges.