# Analysis of Dynamic Complexity of the Cyber Security Ecosystem of Colombia
## 3 Cyber Security Ecosystem of Colombia
### Entities of the Cyber Security Ecosystem of Colombia  
Based on the CONPES 3701 document [9] and the research carried out by the authors, six types of entities have been identified in the Cyber security Ecosystem of Colombia, such as (Figure 2):  
Figure 1: Components of the Cyber security Ecosystem of Colombia. _Public Sector_: Public entities and institutions belonging to the Colombian government and state, which have as part of their objectives functions related to the strengthening of Cyber security and cyber defence. _Private Sector_: group of small, medium, and large businesses that make part of the productive industry axis and every other non-public businesses that participate in the ecosystem. _Citizens_: group of people that reside in the Colombian territory. _Critical Infrastructure_: entities that provide essential services, which are considered strategic in Colombia, such as energy, water, and financial service providers, amongst others. _Research Centers_: institutions that carry out research and innovation in subjects related to cyber security, such as universities, tech centers, excellence centers, think tanks, etc. _Attackers_: people or businesses that attempt to access, intercept, or damage an information system affecting the integrity, confidentiality, and availability of data and systems. Taking in to account the aforementioned information, the description of entities in the public sector that are considered fundamental inside the ecosystem is presented (Figure 3):  
**President**: head of State, head of government and supreme administrative authority [10]. **Congress of the Republic of Colombia**: comprises the senate and chamber of representatives. It is the congress' duty to \"reform the constitution, make laws and exert political control over the government and the administration\" [10]. **Ministry of Information and Communication Technologies (MinICT)**: develops its objective through the regulation of existing norms, adoption of public policies, financing of projects and other activities related with information and communication technologies, including those that correspond  
Figure 3: Public sector entities in the Cyber security Ecosystem of Colombia. Figure 2: Entities in the Cyber security Ecosystem of Colombia. to the area of cyber security through the Direction of Standards and Information Technologies Architecture [11]. **Ministry of National Defence (MinDefence)**: directed by the Minister of Defence, who works in collaboration with the general commanders of the military forces and the national police. CERTCol, the CCG, and the CPC belong to this ministry [12]. **Cybernetic Emergencies Response Team of Colombia (CERTCol)**: Working group which takes part in the public security and infrastructure management in the Vice ministry for Public and Foreign Affairs of the Ministry of Defence. Created in 2012, it's in charge of the coordination on a national scale of all matters of cyber security and cyber defence, as well as answering to all cybernetic incidents that take place in the territory, coordinating with CSIRT (response teams of information incidents) in the country, and the coordination of international organisms in matters related to cyber security [9; 13; 14]. **Cybernetic Command Group (CCG)**: dependence attached to the general command of the armed forces, which have the purpose of preventing and counteracting threats and cybernetic attacks that affect national interests and values. Created in October 2012, its role is the implementation of protocols of cyber defence and defence to critical infrastructure [9]. **Cybernetic Police Centre (CPC)**: part of the organizational structure of the National Police of Colombia. It's in charge of managing cyber security in national territory, supporting investigative labor and judicialization by the commission of cybernetic punishable acts, receiving information and reporting cybernetic crimes. It was originally a unit of cybernetic offenses but from CONPES 3701 document it changed its name to CPC [9].