The Cybersecurity Delegate holds a role that goes well beyond technical management. They must understand the organization's obligations, identify risks, coordinate incident response and report relevant information to executive leadership and to the ANCI where required. Meeting those responsibilities calls for regulatory knowledge, management tools and the ability to influence and coordinate across departments.
What we offer
Cyberhub runs a hands-on training program that prepares participants to take on the Cybersecurity Delegate role, combining the requirements of Chile's Law 21.663 with scenarios and tools that apply to your organization. It blends technical content, practical exercises, case analysis and simulations aimed at strengthening response capability and decision-making.
Program objective
Build the competencies needed to perform the Cybersecurity Delegate role effectively: understanding the applicable regulatory obligations and strengthening capabilities in risk, incident, control and continuity management, and executive communication.
Who is it for?
Professionals who will take on, or already work alongside, the Cybersecurity Delegate role — particularly those in:
- Technology and information security.
- Risk and compliance.
- Operational continuity.
- Audit and governance.
- Organizational management and coordination.
Competencies participants will develop
- Identify the applicable obligations under Law 21.663 and related regulation.
- Assess and prioritize technology risks and critical assets.
- Understand incident management and reporting processes.
- Coordinate the organizational response to cybersecurity situations.
- Oversee controls, continuity plans and improvement initiatives.
- Communicate risks, gaps and decisions to executive leadership.
- Connect the work of technical, operational and management teams.
Learning path
Five modules combining technical knowledge, management and leadership skills.
- 01. The Delegate's strategic role. Understanding the role, institutional obligations, the relationship with the ANCI and cybersecurity governance.
- 02. Technology risk management. Identifying threats and critical assets, assessing risk and defining treatment measures.
- 03. Incident and vulnerability management. Classification, escalation, response and incident reporting, along with vulnerability disclosure.
- 04. Continuity, controls and follow-up. Operational resilience, continuity plans, control oversight, indicators and continuous improvement.
- 05. Organizational alignment and leadership. Cross-team coordination, executive communication, committee management and strengthening cybersecurity culture.
Training methodology
- Fundamentals: concepts, regulation and key tools.
- Applied cases: scenario analysis and decision-making.
- Workshops: building matrices, reports, controls and plans.
- Simulations: incident drills and executive committee exercises.
Every module includes activities that tie the content back to the real responsibilities of the role.
Format and duration
- Duration: 10 hours.
- Structure: 5 modules of 2 hours each.
- Delivery: in person or live online.
- Assessment: practical activities and a final simulation.
Included deliverables
- Digital participant materials.
- Risk matrix template.
- Executive report template.
- Control follow-up guide.
- Practical cases and an ANCI reporting drill.
- Certificate of participation.
Benefits for your organization
- Stronger governance. Sharpens the definition of responsibilities, reporting lines and decision-making processes.
- Greater response capability. Prepares participants to coordinate incident management and report relevant information promptly.
- More effective risk management. Provides tools to identify, prioritize and track technology risks and controls.
- Cross-functional coordination. Strengthens collaboration between technology, operations, risk, compliance and executive leadership.
