CEIAI Governance Database
Back to the database
Record STMT-WF8DFC5Legally binding

Inteligencia Artificial | Ministerio de Ciencia, Innovación, Tecnología y Telecomunicaciones

Other State lawLatin America and the Caribbean · CRin forceNot AI-specific

This document outlines the operational policies, contact information, services, and incident management procedures for the Computer Security Incident Response Center of Costa Rica (CSIRT-CR). It defines the team's mission to promote science, technology, innovation, and telecommunications, and describes its role in handling cybersecurity incidents for public sector systems and critical infrastructure. The text also details communication protocols, incident classification and resolution services, and proactive prevention activities.

Summary and content fields are drawn from the document text and are pending editorial review.

Who issued it

Ministerio de Ciencia, Innovación, Tecnología y TelecomunicacionesGovernment (executive) · CR
Lead issuer
Legal forceLegally binding
Under whose authorityState law
Judged fromfull text

Who it governs

General publicNational governmentPublic sector bodies

Public sector bodies, critical infrastructure operators, and constituents looking to report cybersecurity incidents or understand the services provided by CSIRT-CR.

Sectors
Telecommunications and digital services · cybersecurity and computer incident responsePublic administration

What the document contains

What's covered

The document covers the contact details, operational mission, constituency, and incident response services of Costa Rica's national computer security incident response team. It specifies how security incidents are classified, coordinated, and resolved, alongside proactive prevention and awareness activities.

What's missing

The document does not contain AI-specific governance guidelines, legal definitions, or regulatory penalties for cybersecurity breaches.

Key takeaways
  • The Computer Security Incident Response Center of Costa Rica (CSIRT-CR) operates 24/7 to coordinate response to ICT-related incidents affecting public sector systems and critical infrastructure.
  • CSIRT-CR handles all reported information confidentially and utilizes the Traffic Light Protocol (TLP) for information exchange.
  • The center provides incident response services including classification, coordination, and resolution assistance to eliminate vulnerabilities.
  • Proactive activities include prevention, preparedness, alerts, and actionable advice to reduce the impact of potential threats.
Outline
· 1. Document Information
· 2. Contact Information
· 3. Letter
· 4. Policies
· 5. Services
· 6. Incident Reporting Forms
· 7. Disclaimer
Issued10 November 2023
Length741 words
FormatNot recorded
Scopenational

How it scores

Pending review

Each score is backed by a quote verified against the document text. Editorial review has not yet confirmed them.

Accountability

0/5

Clear responsibility for AI outcomes

N/A

screening score · 2026-10-23

Fairness

0/5

Non-discrimination and equitable treatment

N/A

screening score · 2026-10-23

Human Dignity

0/5

Respect for the inherent worth of persons

N/A

screening score · 2026-10-23

Human Oversight

0/5

Humans remain in control of consequential decisions

N/A

screening score · 2026-10-23

Privacy

0/5

Protection of personal data and private life

N/A

screening score · 2026-10-23

Transparency

0/5

Openness about how AI systems work and are used

N/A

screening score · 2026-10-23

Enforcement

0/5

Consequences and compliance mechanisms with real force

N/A

screening score · 2026-10-23

Impact Assessment

0/5

Required assessment of an AI system's risks/impacts before or during use

N/A

screening score · 2026-10-23

Topics

cybersecurity incident_response public_sector critical_infrastructure costa_rica