Skip to content

Who responds

When a threat appears that cuts across the whole sector, someone has to know who to call and who decides. This layer draws the fifteen actors who would have to sit at the table of a sector cybersecurity center, and who can convene it.

Governance graph: anchor operators, sector chambers, market operators, state authority, and conveners. The lines are relationships of governance or membership. Source: public bylaws and the replicability analysis of the energy cyber-defense consortium.

The coalition already exists

The structure a sector center would need has run since 1992. CAMMESA, which runs the wholesale power market, is co-governed by the sector's four chambers, generators, transmitters, distributors, and large users, plus the State. The companies you would convene are already partners with one another in running dispatch. On the gas side, MEGSA repeats the mold: the State created the figure by decree and a private entity constituted and ran it.

The convener brings no money: it brings the signature. The Energy Secretariat, or the regulator, can create a coordination table by a zero-cost regulation. The National Cybersecurity Center is the national authority, and the Chief of Cabinet's office executes the Inter-American Development Bank program that already has a private-sector information-sharing output budgeted, and unexecuted. The pieces are there; they just need to be seated.

Why private, not state

The threat-sharing schemes that work in other countries are constituted and run by the operators themselves, with the State as convener rather than administrator. The private design brings two things that weigh in Argentina. A private entity falls outside the freedom-of-information regime, so an incident reported to it is not obtainable by a third party. And it does not inherit the volatility of state reorganizations, which in cyber matters were four in fifteen years.

How far the graph goes

  • It is a model of relationships, built from public bylaws: it reflects who relates to whom, and not the current org chart of any entity nor a table already constituted.
  • The anchor operators shown are an illustrative subset. None of the companies that appear received a formal invitation, and this graph does not extend one.
  • The only line that does not exist yet is the one joining the National Cybersecurity Center to a private sector center. It is drawn as a proposal, and it is the link missing today.