Cybersecurity Key to Digital Transformation

Mexico is at a historic crossroads: digitizing the public sector has shifted from ambition to governmental mandate. The establishment of the Digital Transformation and Telecommunications Agency (ATDT) and its General Directorate of Cybersecurity, both nested within the National Coordination of Digital Infrastructure, marks a decisive effort to organize, modernize, and safeguard the nation’s technological infrastructure. Yet, the defining question remains: Are we building a digital transformation that is truly secure and sustainable?

The answer is clear: digital progress cannot advance without robust cybersecurity. Without that, any achievements risk becoming systemic vulnerabilities.

One notable milestone of the ATDT is the Llave MX platform, which by June 2025 had surpassed 8.8 million active digital identities and integrates with 67 interoperable systems. Nonetheless, this advancement coexists with a significant gap: over 76 million Mexicans still lack biometric registration, according to the First Government Report of the Claudia Sheinbaum administration. Without completing this crucial component, the national digital identity system falls short of being solid and reliable.

Operational Capacity and Ongoing Challenges

At the Second National Cybersecurity Forum in September, Heidy Karla Rocha Ruiz, director of cybersecurity at ATDT, underscored the urgent need to enhance the federal government’s capacity to respond to cyber incidents. Her remarks candidly illustrate the current landscape: a cybersecurity ecosystem growing in maturity yet still beset by critical operational, regulatory, and strategic deficits demanding swift action.

The creation of ATDT, together with the supporting legal framework, demonstrates strong political will toward state digital transformation. However, realizing objectives such as secure interoperability, streamlined processes, and technological sovereignty requires viewing cybersecurity not as a mere add-on but as a foundational pillar. Achieving this demands updated legislation, reliable technical infrastructure, skilled professionals, and an institutional culture focused on prevention.

Critical Infrastructure, Digital Identity, and Regulation

One of Mexico’s most pressing priorities is developing a comprehensive legal framework that protects critical infrastructure and sets minimum standards for authentication, end-to-end encryption, continuous monitoring, and governance of interoperability. Without these safeguards, even digital identity, which already handles millions of daily transactions, risks becoming a vulnerability that jeopardizes public services and undermines citizen trust.

Regionally, this challenge presents a strategic opening: Mexico could emerge as a Latin American leader in secure digital governance by aligning its approach with international best practices. Countries like Estonia and Singapore have demonstrated that institutional cyber resilience is cultivated through well-coordinated policies, sustained investment, and advanced technical training. Embracing these principles could fast-track Mexico’s digital maturity without compromising security.

The Human Factor: The Persistent Challenge

However, no infrastructure — no matter how advanced — can suffice without fostering a culture of security. Human error remains the primary entry point for cyberattacks, especially in contexts where reactive practices and low maturity models in prevention, monitoring, and response dominate.

Thus, ATDT’s strategy must incorporate ongoing training for public servants, sustained awareness campaigns for citizens, and the promotion of digital skills from early education stages. The nation’s resilience will increasingly hinge on empowered users capable of operating safely in the digital realm.

The digital transformation of Mexico’s government can only be sustainable if anchored by robust cybersecurity. The country possesses the talent, expertise, and political determination. Now, it requires firm resolve, standardization, and open collaboration among government entities, industry players, academia, and civil society.

This is a historic opportunity — one that must not be missed.

@IQSEC (Facebook | LinkedIn | X | Instagram | TikTok) 

About IQSEC:

IQSEC is a 100% Mexican company with nearly two decades of specialized experience in cybersecurity, cryptography, digital identity, and artificial intelligence. We have dedicated research and development as well as cyberlegal departments, enabling us to anticipate market trends through continuous monitoring and the creation of proprietary technological solutions, including advanced digital identity and cybersecurity products. Our portfolio includes unique national success stories and cutting-edge architectures such as cybersecurity mesh. IQSEC adopts a consultative approach focused on generating value with a technology-agnostic vision and proven integration capabilities across both public and private sectors. Our Cyber Risk Operation Center (CROC) enhances organizational risk management, while our talent development programs reaffirm our commitment to social responsibility. Backed by our own infrastructure, solid financial footing, and thought leadership, IQSEC has established itself as a strategic partner for organizations seeking resilience and comprehensive protection against evolving cyber threats.

For more information: www.IQSEC.com.mx