Source: https://ncsi.ega.ee/country/py/
Timestamp: 2020-04-07 01:15:27
Document Index: 167956542

Matched Legal Cases: ['art. 46', 'Art 4', 'Art. 7', '§ 20', 'Art. 36', 'Art. 175']

NCSI :: Paraguay
36. Paraguay 57.14
66th Global Cybersecurity Index
113th ICT Development Index
105th Networked Readiness Index
Population 6.9million
Area (km2) 406.8thousand
Version 6 Feb 2020 Choose a version 6 Feb 2020 7 Jan 2020 7 Nov 2018
https://www.presidencia.gov.py/archivos/documentos/DECRETO2274_30nobos1.PDF
The Presidencial Order Nr. 2274 established a dedicated Cybersecurity Chapter regarding the duties and responsabilities of MITIC in sense of Cybersecurity. Government cybersecuirty policies is a specific responsability. Chapter IV, art. 46 (page 18)
http://gestordocumental.senatics.gov.py/share/s/zkKW1CkKScSvapqlB7UhNg
It is anticipated that this National Cyber Security Plan and its Action Plan will be updated and reviewed every 3 years or when necessary, in accordance with the proposal for the revision of the National Cyber Security Coordinator and the consent of the National Cyber Security Commission.
https://www.senatics.gov.py/application/files/4914/9339/6685/DECRETO_7052-1.pdf
Art 4 defines the composition of the National Cybersecurity Commission
Section 5.2: "The National Cybersecurity Commission, chaired by the National Cybersecurity Coordinator, will strengthen relations of coordination, collaboration and cooperation among the different sectors and stakeholders in cybersecurity, including the State, the private sector, academia and society civil. From this space will be promoted analysis, studies and proposals of initiatives both nationally and internationally, that favor the ecosystem of cybersecurity. The National Commission should report and report the progress in the implementation of this National Plan to the National Coordinator. To this end, the National Commission must work closely and coordinate with all other entities that have responsibilities under the National Plan, as well as seek to promote the exchange of information and the development and implementation of joint cybersecurity solutions."
Decree N. 7052/2017 By which the National Cybersecurity Plan is approved and the National Cybersecurity Commission is integrated.
National Cybersecurity Plan: Challenges, Roles and Compromises
https://www.mitic.gov.py/download_file/view/729/708
Page 13, Product 8 - National Cybersecurity System advance in 6 years.
https://www.cert.gov.py/application/files/4115/6642/8626/MITIC_Iniciativas_Ciberseguridad_PY.pdf
Brief excecutive presentation of implementation plan of the national strategy
https://www.mitic.gov.py/download_file/view/827/708
Implementation proyects. Investment of almost 7.000.000USD in 6 years. (Product 8)
https://www.cert.gov.py/application/files/6515/8256/8110/Informe_Ciberseguridad_Paraguay_2019_-_final.pdf
Annual cybersecurity situation report, contains statitics, data and trends, obtained from incident reports from CERT-PY, public data feeds sharing. There is also include a summary of the current state in regulatory framework, cyber awareness and the level of cyber maturity of the country.
https://www.conectateseguro.gov.py/
https://www.cursos.gov.py/cursoDetalle?idCurso=474
Cyberdefense and cybersecurity Specialization - IAEE/MITIC
http://www.iaee.gov.py/index.php/admision/programa-de-especializacion-en-ciberdefensa-y-ciberseguridad-estrategica-2019
https://www.isaca.org/membership/local-chapter-information/pages/chapteroverview.aspx?chapterid=184&utm_referrer=
ISACA - Paraguay Chapter
https://www.owasp.org/index.php/Paraguay
http://www.oas.org/es/sms/cicte/prog-ciberseguridad.asp
Paraguay is part of the CICTE OAS Platform, where is regular information exchange and cooperation between members
https://www.cert.gov.py/index.php/controles-criticos-seguridad
Paraguay adopted CIS Controls as government cyberecurity controls baseline. First 6 controls will be mandatory starting december 2019, approved by Resolution of SENATIC 115/118
http://gestordocumental.senatics.gov.py/share/s/26wzh0W7TyO4miM3laJ_Yw
https://www.cert.gov.py/index.php/criterios-minimos-de-seguridad-de-software
MITIC established minimum security requirements for government software, mandatory according SENATIC Resolution Nr. 118/2018
https://www.cert.gov.py/index.php/directivas-de-ciberseguridad-para-canales-de-comunicacion-oficiales-del-estado
Cybersecurity guideline for official government communication and media channels (government social media accounts, government platforms accounts, email accounts), mandatory according MITIC 432/2019
The MITIC (Ministry of Communication and Information Technology), as indicated by Law No. 6207 which established the MITIC (Art. 7, § 20 and 24) and Decree No. 2274 (Art. 36,43 and 46 [linked above]).
http://www.policianacional.gov.py/identificaciones/quienes-somos/
Identificador Civil (I.C.) affixed to the back of the Cédula de Identidad (I.D. Card)
Last paragraph: "The I.C. number is based on the following: the first three numbers correspond to the office number of the place of registration, the next eight numbers correspond to the date of registration, (day-month-year), the next three numbers correspond to the number of folio, the another three to the volume number and the last three to the record number."
http://www.impuestospy.com/Guia%20Tributaria/reg.unico.contribuyente.pdf
First paragraph: "The Unique Taxpayer Registry (RUC) is the identification number, of the personal, non-transferable Tax Identification Card, which corresponds to all those Physical Persons (national or foreign), Legal entities and non-profit organizations (companies, partnerships, associations, corporations, etc.) that carry out economic activities within the national territory."
https://www.acraiz.gov.py/html/PolitCertif.html
The Industry and Commerce Ministry (MIC) is responsible for the Root Certificate of Trust, and regulates the requirements for cryptosystems in the field of providers of trust services , through the "Política de Certificación de la Autoridad Certificadora Raíz del Paraguay" - Certification Policy of of the Root Certifying Authority of Paraguay (Resolution N° 1561/16) https://www.acraiz.gov.py/cps/politicas.pdf https://www.acraiz.gov.py/html/PolitCertif.html
https://www.acraiz.gov.py/html/men_3_declar.html
https://www.acraiz.gov.py/html/descarg_3-Resol.html
https://www.paraguay.gov.py/identidad-electronica
Law N° 4.017/13 "De Validez Jurídica de la Firma Electrónica, la Firma Digital, los Mensajes de Datos y el Expediente Electrónico" (On the Legal Validity of the Electronic Signature, Digital Signature, Data Messages and Electronic File) regulates the Electronic Identification. With this law, the MITIC offers an online platform for electronic identity for the citizen, as a first step to the e-citizen (digital passport, digital ID card, etc. - projects for the near future)
http://www.bacn.gov.py/leyes-paraguayas/3550/de-validez-juridica-de-la-firma-electronica-la-firma-digital-los-mensajes-de-datos-y-el-expediente-electronico
https://www.acraiz.gov.py/adjunt/Leyes%20y%20Decretos/ley_4017.pdf
Law No. 4,017 / 2010 of the Legal Validity of the Electronic Signature, the Digital Signature, the Data Messages and the Electronic File
Title III Articles 15 - 19
http://www.redipd.es/legislacion/common/legislacion/paraguay/Decreto_N_7369.pdf
Decree N. 7369 / 2011 By Which the General Regulation of Law 4017/2010 "of the Legal Validity of the Electronic Signature, the Digital Signature, the Data Messages and the Electronic File" is Approved
Article 2 : (Paragraph 2) … The Entities that reproduce original documents by electronic means or that provide the storage services must incorporate a chronological stamping procedure, in order to guarantee the legal effects of the electronic document as a functional equivalent of the physical document that is stored, in accordance with the technological and operative standards that the Application Authority implements ...
Article 38: "The Application Authority of this Law shall be the National Institute of Technology and Normalization." (current name: National Institute of Technology, Normalization and Metrology)
http://www.redipd.org/legislacion/common/legislacion/paraguay/Ley_1682_de_2001.pdf
Law N. 1682 of 2001 Which Regulates Private Information
http://www.redipd.org/legislacion/common/legislacion/paraguay/Ley_1969_de_2002.pdf
Law N. 1969 of 2002 Which Modifies, Extends and Repeals Various Articles of Law N. 1682 "Which Regulates Private Information"
https://www.cert.gov.py/index.php/certpy
https://www.mitic.gov.py/viceministerios/tecnologias-de-la-informacion-y-comunicacion/ciberseguridad-y-proteccion-a-la-informacion
By the international initiative led by the OAS "Confidence Measures in Cyberspace", the General Directorate of Cybersecurity and Information Protection dependend of the Ministry of Information and Communication Technologies has been designated as the only point of contact for Paraguay for international cybersecurity coordination.
https://www.cert.gov.py/application/files/6214/1683/3885/LEY_N_4439.pdf
Law No. 4,439 / 2011 That modifies and extends several articles of Law No. 1,160 / 97 (Criminal Code) relating to informatics crimes
e.g. Article 146 b.- Improper access to data
Article 146 c.- Data interception
Article 146 d.- Preparation of undue access and interception of data
Article 174 b.- Improper access to computer systems
Art. 175.- Sabotage of computer systems
Article 188.- Scam through computer systems
Additional information and explanations from the Council of Europe
https://www.ministeriopublico.gov.py/delitos-informaticos-i242
Unidad Especializada de Delitos Informáticos (Specialized Unit of Computer Crimes)
This Division was created through Resolution No. 1,078, of December 7, 2010, with the following functions: a) plan and implement the course of action, in accordance with the national strategy and policy of the fight against cybercrime; ... c) receive complaints in accordance with Paraguayan legislation; d) investigate and process complaints according to due process; e) collaborate with other State agencies to prevent, investigate and repress computer crimes; (http://afyonluoglu.org/PublicWebFiles/strategies/America/Paraguay%202017%20National%20Cyber%20Security%20Strategy.pdf - page 17 )
https://www.ministeriopublico.gov.py/departamento-tecnico-i405
Forensics Informatics Section which is part of the Technical Department of the Forensics Laboratory of the Public Ministry.
Information from the Council of Europe Portal: https://www.coe.int/en/web/conventions/full-list/-/conventions/treaty/185/declarations
General Director of Cyber Security & Information Protection at the Ministry of ITC