Cybersecurity Policies in Brazil Under the Lens of Líderes Program
30/04/2024
Thaís Aguiar, a Brazilian attorney and researcher, stands out as one of the participants in the 2023 edition of LACNIC’s Líderes program. This initiative offers funding and mentorship for conducting research on Internet Governance (IG) topics relevant to the region, focusing on the perspectives of local and underrepresented communities.
The objective of her research, titled “Cybersecurity Policies in Brazil: Where Do We Come From and Where Are We Going?” aimed to explore the trajectory of cybersecurity governance in Brazil within the context of accelerated digital transformation and regulatory updates, with growing challenges related to digital security and the need to strengthen the trust of users on the Internet. The aim was to contribute to the development of more effective strategies in the public policy debate.
What led you to focus on that particular issue? Why is it relevant to your community?
First, the current scenario reveals an alarming increase in the number of cybersecurity incidents: Brazil faces over 100 billion attempted cyber-attacks annually, resulting in significant financial losses and negative impacts on the provision of essential public services, such as the healthcare system. This increase not only leads to considerable financial losses, but also poses significant challenges for service availability and the reputation of the organizations affected.
Moreover, this situation undermines users’ trust in the digital environment, which is essential for the development of a healthy and prosperous digital society. The COVID-19 pandemic, for example, accelerated digital transformation even further, making technological tools essential for both businesses and public services. This context highlights the importance of effective cybersecurity policies to protect sensitive data and ensure the uninterrupted operation of businesses and essential services. Discussing the cybersecurity landscape in the country involves delving into the legal and political aspects related to the protection of individual and collective legal assets on the network, as well as Brazil’s digital sovereignty.
It is noteworthy that Brazil holds a globally acknowledged position in Internet Governance; however, it faces the paradoxical absence of strong cybersecurity policies. Therefore, the research was also driven by the recognition of the gaps, advances and challenges faced by Brazil in the development and implementation of cybersecurity policies and the urgent need to address this issue and develop effective policies to protect the country’s digital infrastructure.
The decision to focus on this topic was further strengthened by the political environment prevailing in Brazil during the research, characterized by debates surrounding the revision of the National Cybersecurity Strategy and the introduction of new cybersecurity policies.
What are the main findings and conclusions of your work? Why are they relevant to the regional community and Internet Governance?
(Free access, no subscription required)
This work is relevant to the regional community for several reasons. First, by highlighting the regulatory gap in the area of cybersecurity, it draws attention to urgent issues affecting not only Brazil but the entire region. These gaps may represent shared vulnerabilities that require collaborative approaches for mitigation and resolution. Similarly, the rising trend of securitization within the national ecosystem also serves as a warning for other situations. Additionally, the issues raised regarding institutional coordination, centralization of processes and the need for diverse perspectives in Internet Governance are challenges encountered by numerous countries.
Finally, the recommendations such as the need for evidence-based policies and a multisectoral approach to Internet governance, have the potential to influence not only Brazilian policies, but also impact policies adopted by other countries in the region.
What has been your experience with Líderes program? How was your experience with the program’s process and the guidance from your mentor?