UNAM to Deploy Unlimited Resources to Strengthen Cybersecurity

Universidad Nacional Autónoma de México (UNAM) says it will allocate unlimited resources to strengthen its cybersecurity framework and digital governance. This directive follows the first ordinary session of the technical committee for the governance of computing and information and communication technologies in Mexico City.

The implementation of new regulatory frameworks seeks to shield the digital assets of the university against emerging threats. Hugo Concha, General Attorney, UNAM, says that the new regulation provides security to the institution because "that is the central objective of all information use regulations."

This strategic shift arrives after UNAM reported that unauthorized parties compromised five information systems. To mitigate future risks, Leonardo Lomelí, Dean, UNAM, instructed the General Directorate of Computing and Information and Communication Technologies (DGTIC), to execute a comprehensive cybersecurity plan. The university aims to restore confidence among the community by modernizing its technological infrastructure and establishing clear protocols for data management.

The institutional response focuses on both technical and human factors. Lomelí emphasizes the importance of participation in training courses and adherence to instructions provided by the university to ensure that systems remain updated. By prioritizing these investments, the university intends to create a resilient environment that protects the academic and administrative continuity of its operations.

The strategy includes institutional perimeter physical security to protect communication links to and from the internet, says Héctor Benítez, Director, DGTIC. During 2026, the university will strengthen cybersecurity guidelines and establish a network of experts to share knowledge across all departments. Furthermore, the institution will implement training programs across various specialization areas to educate the university community on digital threats.

The technical committee for the governance of computing and information and communication technologies (CTeTIC) approved its internal regulations following a review by the office of the general attorney. This operational framework comprises seven specialized subcommittees designed to manage the technological lifecycle. 

The information technology governance subcommittee will revise the proposed governance regulations to integrate norms for the acceptable use of the REDUNAM service, software management, and the implementation of a university digital identity. Simultaneously, the telecommunications group will focus on the modernization route and the institutional financing model for the telecommunications infrastructure. The supercomputing agenda involves an academic review of infrastructure renewal and the evaluation of projects for resource allocation.

In the area of software development, the subcommittee will provide follow-up on active projects, such as the integration of the university digital identity in information systems. Regarding information security, Benítez says this group is working on a federated security version for the institution, where information culture and respect for individual identity are fundamental to preventing attacks. To ensure operational cohesion, the RedTIC coordination body will synchronize efforts across the university network.

Finally, the computing infrastructure and software use group will deliver the 2025 IT Census and conduct the 2026 census to understand the standing of hardware and software assets. These instruments serve as the primary diagnostic tools for future resource distribution and system updates.

Benítez says that an eighth subcommittee focused on AI is under development. Through these specialized bodies, the university will monitor compliance with local policies and ensure that personnel in charge of local infrastructure receive training to maintain systems. The DGTIC will also supervise the deployment of these updates to prevent vulnerabilities during this time of transition.