{"id":1749,"date":"2026-06-05T15:12:39","date_gmt":"2026-06-05T20:12:39","guid":{"rendered":"https:\/\/seikla.com\/?p=1749"},"modified":"2026-06-05T15:12:39","modified_gmt":"2026-06-05T20:12:39","slug":"ley-organica-para-el-fortalecimiento-de-la-ciberseguridad","status":"publish","type":"post","link":"https:\/\/seikla.com\/en\/articulos\/ley-organica-para-el-fortalecimiento-de-la-ciberseguridad\/","title":{"rendered":"Organic Law for the Strengthening of Cybersecurity"},"content":{"rendered":"<p><strong>Implicaciones, plazos de notificaci\u00f3n y r\u00e9gimen sancionador en el Ecuador\u00a0<\/strong><\/p>\n<p><span data-contrast=\"auto\">El pasado 22 de mayo de 2026 se public\u00f3 en el Registro Oficial la Ley Org\u00e1nica para el Fortalecimiento de la Ciberseguridad. Esta nueva reforma de manera estructural a la Ley Org\u00e1nica para la Transformaci\u00f3n Digital y Audiovisual, elevando la seguridad digital a la categor\u00eda de los derechos fundamentales y la consolidaci\u00f3n de la confianza en el ecosistema digital del pa\u00eds.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">El objetivo central de la ley es establecer est\u00e1ndares nacionales unificados de seguridad digital, estructurar los mecanismos obligatorios de gesti\u00f3n y notificaci\u00f3n de incidentes, y blindar la infraestructura cr\u00edtica digital y los servicios esenciales de la Rep\u00fablica.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">A continuaci\u00f3n, detallamos un an\u00e1lisis t\u00e9cnico de los pilares fundamentales de la norma y las consideraciones pr\u00e1cticas que las organizaciones deben adaptar de forma inmediata para asegurar su cumplimiento.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<ol>\n<li aria-setsize=\"-1\" data-leveltext=\"%1.\" data-font=\"\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:0,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1.&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Gobernanza y \u00c1mbito de aplicaci\u00f3n\u00a0<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ol>\n<p><span data-contrast=\"auto\">La Ley ratifica formalmente al Ministerio de Telecomunicaciones y de la Sociedad de la Informaci\u00f3n (MINTEL) como el ente rector y m\u00e1xima autoridad competente en la materia, facult\u00e1ndolo para emitir pol\u00edticas p\u00fablicas, directrices t\u00e9cnicas y normativa vinculantes de obligatorio cumplimiento.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559685&quot;:720,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Las disposiciones de este cuerpo legal son de\u00a0acatamiento\u00a0obligatorio para:<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559685&quot;:720,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"2\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:1440,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><b><i><span data-contrast=\"auto\">Prestadores de Servicios Digitales (PSD):<\/span><\/i><\/b><span data-contrast=\"auto\">\u00a0Personas naturales o jur\u00eddicas que provean servicios de computaci\u00f3n en la nube, centros de datos, pasarelas de pago y plataformas de intermediaci\u00f3n digital.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"2\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:1440,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><b><i><span data-contrast=\"auto\">Empresas Privadas Estrat\u00e9gicas:<\/span><\/i><\/b><span data-contrast=\"auto\">\u00a0Aquellas entidades corporativas responsables de la operaci\u00f3n de infraestructura cr\u00edtica digital, o cuyas actividades comerciales e industriales impacten de manera directa en la continuidad de servicios esenciales, tales como energ\u00eda, sistema financiero, salud y telecomunicaciones.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ul>\n<ol>\n<li aria-setsize=\"-1\" data-leveltext=\"%1.\" data-font=\"\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:0,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1.&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">El deber de notificaci\u00f3n de Incidentes:\u00a0Plazos y\u00a0Ventas temporales<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ol>\n<p><span data-contrast=\"auto\">La norma introduce un esquema temporal sumamente riguroso para la comunicaci\u00f3n de eventos que comprometen la seguridad de la informaci\u00f3n:<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559685&quot;:720,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"3\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:1440,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><b><i><span data-contrast=\"auto\">Incidentes generales de Ciberseguridad:\u00a0<\/span><\/i><\/b><span data-contrast=\"auto\">Las entidades p\u00fablicas y los operadores de infraestructura cr\u00edtica digital deben notificar de manera inmediata al MINTEL cualquier suceso que\u00a0afecte la disponibilidad, integridad o confidencialidad de sus sistemas o datos. El plazo m\u00e1ximo para formalizar esta notificaci\u00f3n es de setenta y dos horas desde su detecci\u00f3n, de conformidad con los protocolos t\u00e9cnicos que emita la autoridad rectora.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"3\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:1440,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><b><i><span data-contrast=\"auto\">Modificaci\u00f3n directa a la LOPDP (Vulnerabilidad de Datos Personales):<\/span><\/i><\/b><span data-contrast=\"auto\">\u00a0Se reforma de manera expresa el art\u00edculo 43 de la Ley Org\u00e1nica de Protecci\u00f3n de Datos Personales. Ante una brecha o vulneraci\u00f3n de seguridad que involucre datos de car\u00e1cter personal, el operador econ\u00f3mico estar\u00e1 obligado a notificar a la Autoridad de Protecci\u00f3n de Datos Personales, al organismo de regulaci\u00f3n sectorial competente y, para fines puramente informativos y de coordinaci\u00f3n t\u00e9cnica, al CSIRT correspondiente. Esta obligaci\u00f3n deber\u00e1 sustanciarse en un t\u00e9rmino\u00a0m\u00e1ximo de 5 d\u00edas tras haber tenido constancia del hecho.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ul>\n<ol>\n<li aria-setsize=\"-1\" data-leveltext=\"%1.\" data-font=\"\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:0,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1.&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Reconocimiento t\u00e9cnico: Habilitaci\u00f3n Jur\u00eddica del Hacking \u00c9tico<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ol>\n<p><span data-contrast=\"auto\">Como una medida innovadora para mitigar el riesgo tecnol\u00f3gico, la ley otorga plena validez jur\u00eddica a la realizaci\u00f3n de pruebas de penetraci\u00f3n y pr\u00e1cticas de hacking \u00e9tico. Para su procedencia leg\u00edtima, se\u00a0requiere\u00a0la\u00a0concurrencia\u00a0obligatoria de tres requisitos:<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559685&quot;:720,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"4\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:1440,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">Consentimiento expreso, previo y por escrito de la organizaci\u00f3n auditada.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"4\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:1440,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">Una finalidad estrictamente leg\u00edtima orientada a la identificaci\u00f3n de vulnerabilidades corporativas.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"4\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:1440,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">Que el profesional o la firma auditora a cargo\u00a0se encuentre debidamente inscrita en el nuevo Registro Nacional creado para el efecto.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ul>\n<ol>\n<li aria-setsize=\"-1\" data-leveltext=\"%1.\" data-font=\"\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:0,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1.&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">R\u00e9gimen Administrativo Sancionador y el Principio de Proporcionalidad<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ol>\n<p><span data-contrast=\"auto\">La Ley introduce un cat\u00e1logo de infracciones y multas que se aplicar\u00e1n de forma independiente a las ya contempladas en la LOPDP. Sin embargo, respecto a las garant\u00edas constitucionales del administrado, se establece el principio de coordinaci\u00f3n interinstitucional y el principio de non bis in \u00eddem, por el cual ninguna entidad estatal podr\u00e1 imponer\u00a0dos sanciones administrativas basadas en los mismos hechos y fundamentos.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559685&quot;:720,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559685&quot;:720,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Las sanciones se calcular\u00e1n sobre la base de los ingresos econ\u00f3micos de la organizaci\u00f3n infractora, categoriz\u00e1ndose de la siguiente manera:<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559685&quot;:720,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559685&quot;:720,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<table data-tablestyle=\"MsoTableGrid\" data-tablelook=\"1184\" aria-rowcount=\"4\">\n<tbody>\n<tr aria-rowindex=\"1\">\n<td data-celllook=\"0\"><b><span data-contrast=\"auto\">Clasificaci\u00f3n de la Infracci\u00f3n<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:2,&quot;335551620&quot;:2,&quot;335559685&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/td>\n<td data-celllook=\"0\"><b><span data-contrast=\"auto\">Cuant\u00eda\u00a0de la multa (Porcentaje de ingresos)<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:2,&quot;335551620&quot;:2,&quot;335559685&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/td>\n<td data-celllook=\"0\"><b><span data-contrast=\"auto\">Conductas T\u00edpicamente Antijur\u00eddicas<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:2,&quot;335551620&quot;:2,&quot;335559685&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/td>\n<\/tr>\n<tr aria-rowindex=\"2\">\n<td data-celllook=\"0\"><span data-contrast=\"auto\">Leves<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559685&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/td>\n<td data-celllook=\"0\"><span data-contrast=\"auto\">0,1% al 0,7%<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559685&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/td>\n<td data-celllook=\"0\"><span data-contrast=\"auto\">Retraso en la actualizaci\u00f3n de pol\u00edticas y protocolos internos de ciberseguridad sin impacto operativo; omisi\u00f3n de reportes peri\u00f3dicos o notificaciones menores ante la autoridad.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559685&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/td>\n<\/tr>\n<tr aria-rowindex=\"3\">\n<td data-celllook=\"0\"><span data-contrast=\"auto\">Graves<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559685&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/td>\n<td data-celllook=\"0\"><span data-contrast=\"auto\">0,7% al 1,0%<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559685&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/td>\n<td data-celllook=\"0\"><span data-contrast=\"auto\">Incumplimiento de la\u00a0Pol\u00edtica\u00a0Nacional de Ciberseguridad; ocultamiento de incidentes significativos que afecten la\u00a0disponibilidad\u00a0de los sistemas; falta de implementaci\u00f3n de medidas t\u00e9cnicas m\u00ednimas de seguridad indispensables para prevenir, mitigar y controlar riesgos.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559685&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/td>\n<\/tr>\n<tr aria-rowindex=\"4\">\n<td data-celllook=\"0\"><span data-contrast=\"auto\">Muy Graves<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559685&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/td>\n<td data-celllook=\"0\"><span data-contrast=\"auto\">1,0% al 1,5%<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559685&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/td>\n<td data-celllook=\"0\"><span data-contrast=\"auto\">Ocultamiento deliberado de incidentes cr\u00edticos; omisi\u00f3n del reporte de ataques o brechas que menoscaben derechos de terceros; destrucci\u00f3n de registros digitales en infraestructuras cr\u00edticas; y la negativa\u00a0u obstrucci\u00f3n deliberada a cooperar con la autoridad regulatoria o manipular evidencia t\u00e9cnica.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559685&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<ol>\n<li aria-setsize=\"-1\" data-leveltext=\"%1.\" data-font=\"\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:0,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1.&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"5\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Consideraciones pr\u00e1cticas de Implementaci\u00f3n Corporativa<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ol>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"5\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:1440,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><b><i><span data-contrast=\"auto\">Periodo de Gracias Sectorial:<\/span><\/i><\/b><span data-contrast=\"auto\">\u00a0Para los sectores econ\u00f3micos que no cuenten con un \u00f3rgano de control especializado preexiste, el r\u00e9gimen sancionador se volver\u00e1 exigible \u00fanicamente tras transcurrir un periodo de adecuaci\u00f3n de veinticuatro meses contados a partir de la expedici\u00f3n de la normativa t\u00e9cnica secundaria.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"5\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:1440,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><b><i><span data-contrast=\"auto\">Punto de Contacto T\u00e9cnico Permanente (Enlace 24\/7):\u00a0<\/span><\/i><\/b><span data-contrast=\"auto\">Toda organizaci\u00f3n sujeta a esta regulaci\u00f3n deber\u00e1 designar y formalizar un punto de contacto t\u00e9cnico permanente que asegure disponibilidad total (24 horas, 7 d\u00edas a la semana) para coordinar las alertas tempranas y la mitigaci\u00f3n de brechas con el CSIRT Nacional.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"5\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:1440,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><b><i><span data-contrast=\"auto\">Capacitaci\u00f3n Obligatoria:<\/span><\/i><\/b><span data-contrast=\"auto\">\u00a0Se impone a los empleadores la obligaci\u00f3n legal de dise\u00f1ar, estructurar y ejecutar de manera recurrente programas de formaci\u00f3n, capacitaci\u00f3n y alfabetizaci\u00f3n en seguridad digital y protecci\u00f3n de datos orientados a sus empleados y usuarios.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ul>\n<p><span data-contrast=\"auto\">En\u00a0Seikla\u00a0brindamos una asesor\u00eda integral que abarca desde la auditor\u00eda t\u00e9cnica y legal de sus sistemas de gesti\u00f3n de seguridad de la informaci\u00f3n, hasta el dise\u00f1o e implementaci\u00f3n de los programas obligatorios de alfabetizaci\u00f3n digital para sus colaboradores.\u00a0<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Implicaciones, plazos de notificaci\u00f3n y r\u00e9gimen sancionador en el Ecuador\u00a0 El pasado 22 de mayo de 2026 se public\u00f3 en el Registro Oficial la Ley Org\u00e1nica para el Fortalecimiento de la Ciberseguridad. Esta nueva reforma de manera estructural a la Ley Org\u00e1nica para la Transformaci\u00f3n Digital y Audiovisual, elevando la seguridad digital a la categor\u00eda &hellip;<\/p>\n<p class=\"read-more\"> <a class=\"\" href=\"https:\/\/seikla.com\/en\/articulos\/ley-organica-para-el-fortalecimiento-de-la-ciberseguridad\/\"> <span class=\"screen-reader-text\">Organic Law for the Strengthening of Cybersecurity<\/span> Read More &raquo;<\/a><\/p>","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"site-sidebar-layout":"default","site-content-layout":"default","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/seikla.com\/en\/wp-json\/wp\/v2\/posts\/1749"}],"collection":[{"href":"https:\/\/seikla.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/seikla.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/seikla.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/seikla.com\/en\/wp-json\/wp\/v2\/comments?post=1749"}],"version-history":[{"count":4,"href":"https:\/\/seikla.com\/en\/wp-json\/wp\/v2\/posts\/1749\/revisions"}],"predecessor-version":[{"id":1753,"href":"https:\/\/seikla.com\/en\/wp-json\/wp\/v2\/posts\/1749\/revisions\/1753"}],"wp:attachment":[{"href":"https:\/\/seikla.com\/en\/wp-json\/wp\/v2\/media?parent=1749"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/seikla.com\/en\/wp-json\/wp\/v2\/categories?post=1749"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/seikla.com\/en\/wp-json\/wp\/v2\/tags?post=1749"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}