Training Program for Cybersecurity Delegates

The Cybersecurity Delegate holds a role that goes well beyond technical management. They must understand the organization's obligations, identify risks, coordinate incident response and report relevant information to executive leadership and to the ANCI where required. Meeting those responsibilities calls for regulatory knowledge, management tools and the ability to influence and coordinate across departments.

Cyberhub runs a hands-on training program that prepares participants to take on the role, combining the requirements of Chile's Law 21.663 with scenarios and tools that apply to your organization. Its objective is to build the competencies needed to perform the role effectively: understanding the applicable regulatory obligations and strengthening capabilities in risk, incident, control and continuity management, and executive communication.

Who is it for?

Professionals who will take on, or already work alongside, the Cybersecurity Delegate role, particularly those in:

• Technology and information security.
• Risk, compliance, audit and governance.
• Operational continuity and organizational management and coordination.

On completion, participants will be able to identify the applicable obligations under Law 21.663 and related regulation; assess and prioritize technology risks and critical assets; understand incident management and reporting processes; coordinate the organizational response to cybersecurity situations; oversee controls, continuity plans and improvement initiatives; communicate risks, gaps and decisions to executive leadership; and connect the work of technical, operational and management teams.

What's included

A five-module learning path combining technical knowledge, management and leadership skills, plus the deliverables needed to put it into practice.

• 01. The Delegate's strategic role: understanding the role, institutional obligations, the relationship with the ANCI and cybersecurity governance.
• 02. Technology risk management: identifying threats and critical assets, assessing risk and defining treatment measures.
• 03. Incident and vulnerability management: classification, escalation, response and incident reporting, along with vulnerability disclosure.
• 04. Continuity, controls and follow-up: operational resilience, continuity plans, control oversight, indicators and continuous improvement.
• 05. Organizational alignment and leadership: cross-team coordination, executive communication, committee management and strengthening cybersecurity culture.
• Deliverables: digital participant materials, a risk matrix template, an executive report template, a control follow-up guide, practical cases, an ANCI reporting drill and a certificate of participation.
• Format and duration: 10 hours in 5 modules of 2 hours each, delivered in person or live online, assessed through practical activities and a final simulation.

How we work

1. Fundamentals: concepts, regulation and key tools for each module.
2. Applied cases: scenario analysis and decision-making.
3. Workshops: building matrices, reports, controls and plans.
4. Simulations: incident drills and executive committee exercises.
5. Assessment: practical activities and a final simulation; every module ties the content back to the real responsibilities of the role.

Benefits

• Stronger governance: sharper definition of responsibilities, reporting lines and decision-making processes.
• Greater response capability: participants prepared to coordinate incident management and report relevant information promptly.
• More effective risk management: tools to identify, prioritize and track technology risks and controls.
• Cross-functional coordination: collaboration between technology, operations, risk, compliance and executive leadership.

FAQ

Is my organization required to have a Cybersecurity Delegate?

Law 21.663 provides for this role within regulated entities, in particular the Operators of Vital Importance designated by the ANCI. The program is also useful if your organization has not yet been designated but wants to prepare, or if it provides services to regulated entities.

Does the program include a certification?

It includes a certificate of participation issued by Cyberhub. The main value lies in the competencies, templates and tools each participant takes away to perform the role.

Can it be adapted to my organization?

Yes. Cases, workshops and simulations are built around scenarios and tools that apply to your context, so that every module relates to the real responsibilities of the role.