Research on information security, ISO 27001, business continuity and cyber resilience in critical sectors of Latin America.
The cybersecurity and resilience axis groups research focused on information asset protection, operational continuity and incident preparedness in Latin American organizations. Studies range from ISO 27001 adoption status to financial sector cyber resilience and security in industrial OT environments. Field data shows that only 34% of ISO 27001-certified organizations in the region have completed the transition to the 2022 version, and that 68% of incidents in certified organizations originate from deficient operational controls, not policy absence. This cluster provides actionable evidence for boards, CISOs and risk teams that need to ground security investment decisions with regional data.
According to our research, the region shows sustained growth but with significant gaps: only 34% of certified organizations have migrated to the 2022 version, and operational control deficiencies persist in 68% of analyzed cases.
IT cybersecurity protects data and information systems, while OT security protects physical processes and industrial control systems (ICS/SCADA). OT environments prioritize availability over confidentiality, and require specific controls such as industrial network segmentation.
The transition requires restructuring 93 Annex A controls (previously 114), incorporating 11 new controls and updating the statement of applicability. Organizations have until October 2025 to complete the migration.
Schedule a diagnostic assessment with ISO methodology.
Request diagnosis