Record STMT-WE88AE0Legally binding

Computer Security Incident Response Center (CSIRT-CR)

MICITT inicia formulación de estrategia de Inteligencia Artificial | Ministerio de Ciencia, Innovación, Tecnología y Telecomunicaciones

Institutional policy State lawLatin America and the Caribbean · CRin forceNot AI-specific

This document serves as the RFC 2350 compliance profile and operational description for the Computer Security Incident Response Center of Costa Rica (CSIRT-CR). It outlines the center's mission, contact information, constituency, services provided, incident handling policies, and reporting procedures. CSIRT-CR operates under the Ministry of Science, Innovation, Technology and Telecommunications to protect public sector systems and critical infrastructure.

Summary and content fields are drawn from the document text and are pending editorial review.

Who issued it

Ministerio de Ciencia, Innovación, Tecnología y TelecomunicacionesGovernment (executive) · CR

Lead issuer

Legal forceLegally binding

Under whose authorityState law

Judged fromfull text

Who it governs

Public sector bodiesGeneral public

Public sector bodies and constituents seeking to report cybersecurity incidents or understand the operational services of Costa Rica's CSIRT.

Sectors

Public administration · Computer Security Incident ResponseTelecommunications and digital services · ICT systems and infrastructure

What the document contains

What's covered

This document covers the operational structure, contact details, constituency, incident response services, and reporting mechanisms of Costa Rica's Computer Security Incident Response Center.

What's missing

The document contains no references to artificial intelligence, AI governance, regulations, or legal obligations for private sector entities outside of critical infrastructure and public sector systems.

Key takeaways

CSIRT-CR provides 24/7 incident response readiness for Costa Rican public sector systems and critical infrastructure.
The center handles incident classification, coordination, and resolution to help constituents eliminate vulnerabilities.
All information shared with CSIRT-CR is handled confidentially using the Traffic Light Protocol (TLP).
Incidents and reports can be submitted via email at csirt@micitt.go.cr.

Outline

· 1. Document Information
· 2. Contact Information
· 3. Letter
· 4. Policies
· 5. Services
· 6. Incident Reporting Forms
· 7. Disclaimer

Issued10 November 2023

Length741 words

FormatNot recorded

1/5

Protection of personal data and private life

CSIRT-CR handles all information confidentially regardless of its priority.

4.2 Cooperation, interaction and dissemination of information

screening score · 2026-10-23

Transparency

1/5

Openness about how AI systems work and are used

Information related to cybersecurity issues and by the CSIRT-CR and about the organization itself is published on the web portal

2.6 Other information

screening score · 2026-10-23

Enforcement

0/5

Consequences and compliance mechanisms with real force

7. Disclaimer

screening score · 2026-10-23

Impact Assessment

0/5

Required assessment of an AI system's risks/impacts before or during use

5.2. Proactive activities

screening score · 2026-10-23

Topics

cybersecurity incident_response critical_infrastructure public_sector costa_rica