- hace 10 minutos
Acompáñenos a conversar con Juan Carlos Puentes, Country Manager de Fortinet Colombia, sobre los desafíos que enfrentan las empresas colombianas y las estrategias para fortalecer su seguridad.
Categoría
🗞
NoticiasTranscripción
00:00Systems engineer, more than 28 years of experience in the technology industry.
00:06Today we are in the north of Bogotá at the Fortinet offices,
00:10Because our guest today is Juan Carlos, Juan Carlos Puentes.
00:14Thank you so much, Edwin, for the invitation.
00:15The job title is in English, which says Country Manager of Fortinet in Colombia.
00:20But that's basically a general manager, the president of the company, right?
00:23That's how it is.
00:24That's right. Okay, so what is Fortinet?
00:26I could explain it, but if we have the president, the one from the company,
00:29I think it's best if we leave that in this conversation that concerns us today.
00:34To all of us watching this on a mobile device,
00:37of a computer, of a television, because that consumption is becoming increasingly erratic,
00:41It has to do with what Juan Carlos and the entire team he leads here in Colombia are doing.
00:45Juan, what is Fortinet?
00:47Well, Edwin, thank you all very much.
00:50Well, Fortinet is the most important North American multinational company
00:55in terms of cybersecurity.
00:58which I would say is the most recognized and, of course,
01:02the one with the most patents worldwide.
01:06And you know, it's been a really beautiful story that we've developed.
01:09throughout all these years because the company is a company in the world
01:13of relatively young technology.
01:1525 years, right?
01:16Exactly. In fact, this year we're actually starting at 26 years old.
01:21and it was founded as a private company,
01:25But from 2000 to 2009 it began to grow
01:30and in 2009 it was already formed as a public company
01:34which is, of course, listed on the stock exchange, on Nasdaq,
01:37and for some years now at Standard & Poor's.
01:39So, it's been an impressive development.
01:42And as we discussed earlier, this cybersecurity issue
01:46It's a topic that, as I say in many conferences,
01:50We are still seeing the tip of the iceberg in cybersecurity.
01:53There is still much to be done and developed.
01:55Well, Juan Carlos spoke about a time there.
01:57The company is celebrating its 25th anniversary and beginning its 26th year.
02:01Juan Carlos has been at the helm of the ship here in Colombia for 10 years.
02:05And, well, because I know her personally.
02:08because it is also one of the safety brands
02:10that we have in El Espectador.
02:13So, every time I go to log in,
02:14Well, it asks me for the password and username there.
02:16And that's where Fortinet appears.
02:17So, I have it very much in my head.
02:19I'm going to give you some data so we can put things into perspective.
02:22why this conversation is necessary.
02:25Latin America registered 843.3 billion
02:29of attempted cyberattacks in 2025.
02:33Brazil, Mexico and Colombia
02:36They are the three most attacked countries in the region.
02:39And now let's bring it to Colombia,
02:41which is the market you lead.
02:4310.9 trillion cyberattack attempts in 2025.
02:46The truth is that he couldn't even grasp that number.
02:497 billion active scans recorded
02:53and it is the third most attacked country in Latin America.
02:57I think that's a, let's say,
02:59It gives one a sufficiently interesting market
03:04so that you can work.
03:05But tell us about the Colombian market.
03:07There are so many people trying to steal information from others.
03:11There are so many people attacking security systems
03:15that people like you are needed in cybersecurity.
03:18Well, look, if that question had been asked 10 years ago,
03:21People would say, I don't believe it.
03:25And I'm going to tell you something.
03:27Four years ago,
03:30It wasn't even 10 billion attempted attacks in Colombia.
03:33There were 30 of them.
03:35The thing is, the number of attacks has decreased.
03:38because nowadays they are more efficient, more sophisticated,
03:41using artificial intelligence.
03:44But when one speaks of attempted attacks,
03:47This means that our laboratory, which is called Fortigar,
03:50has prevented attacks from actually happening.
03:54So, this topic is more common nowadays.
03:58We saw it more in the news,
04:00in large, medium and small companies.
04:03And, well, it also happens with our families.
04:06It happens with the sister, with the nephew, with the aunt, with the grandmother.
04:11And this also happens on a personal level.
04:13So, it's a reality and it's an issue
04:16which, as it continues to grow
04:19all this technological development,
04:21Well, they're growing at the same time.
04:24cybersecurity defense issues.
04:26But also the bad boys
04:28They begin to use these themes
04:31to attack much more effectively.
04:33What could one understand as an attack?
04:35I want to go into more detail now.
04:37of Fortinet and the corporate world,
04:39But what can be understood as an attack?
04:41If you look at him on stage, let's say,
04:45personal, physical, one could understand it.
04:48But what could an attack in the digital realm be?
04:51Well, an attack on the digital stage
04:53It means many things, doesn't it?
04:56When we talk about a cyberattack,
04:59We can talk about data leaks, for example.
05:02And that means, for example,
05:04A company's information is stolen.
05:07for use by that cyberattacker
05:10because she wants to sell it,
05:11because it's important,
05:12because they are important assets or projects
05:15of a company
05:16or confidential information
05:17of a company's employees, etc.
05:20There are many options.
05:21There is also the one that receives more media attention,
05:24What is ransomware?
05:25And it is the kidnapping of information.
05:27They don't use it for anything.
05:28But I'll give it back to you once you pay me.
05:30the kidnapping of information.
05:32Which is usually in Bitcoin.
05:33Exactly.
05:34Payment is in Bitcoins.
05:36In fact, these are people who are already here,
05:39Well, from many years ago,
05:40She's so prepared
05:42that when your information is hijacked
05:45The famous blue screen appears.
05:48And that blue screen
05:50It even brings you a sample
05:52of your information
05:54so that you can confirm
05:55What is your information about?
05:57Obviously it happens in different countries, right?
06:01The attack could come from Russia, China,
06:03Croatia, whatever.
06:05And depending on the company's profile
06:09that have attacked,
06:09They ask you if you want to talk
06:12in English or in Spanish.
06:14So, it's totally organized.
06:17and has been presented
06:19in the large, medium,
06:21but also the small industry of Colombia.
06:23And what's more, even cases
06:25on a personal level,
06:26personal information.
06:28So, there are many methodologies.
06:31Well, nowadays, you know, it's also the case
06:33There is a lot of methodology.
06:35in terms of stealing your information
06:36with a QR code, for example.
06:39If you go to a shopping mall
06:40and then at the door
06:43the establishment says
06:45Here we receive QR codes,
06:46This is the QR code,
06:47and maybe someone put it on top
06:49the original QR code,
06:50another QR code.
06:51So, today there are
06:52different modalities
06:52with cell phones,
06:53with text messages,
06:56Well, the famous ones
06:59voice messages,
07:00when you think
07:01What is a bank?
07:02And it's not the bank.
07:05So, modalities
07:06There are so many,
07:09technologies
07:09There are so many,
07:11also to stop
07:12these things,
07:13but always
07:15what I have learned
07:16in these 10 years
07:17in the world
07:17cybersecurity
07:18Well, that's because...
07:19the most important vector
07:20of attack, then,
07:21It's the people.
07:22Yeah.
07:22That's the reality.
07:23That's good.
07:24And then we'll go
07:25landing a little
07:25in what brings us together here
07:27and it is,
07:28one of the, let's say,
07:29the most talked-about news
07:31in these last few days
07:32They have to do with Ecopetrol.
07:33Imagine,
07:34the largest company
07:35from Colombia
07:35was a victim
07:36of an attack
07:37and the company emerged
07:39basically
07:40of...
08:14The company left
08:15Ecopetrol
08:41Thanks for watching the video.
09:29Thanks for watching the video.
10:00Thanks for watching the video.
10:14Thanks for watching the video.
10:57How has cybersecurity changed, Juan Carlos?
11:00How has cybersecurity changed within the investment decisions of companies in Colombia?
11:05And I ask you, why are, for example, boards of directors and CEOs or presidents so involved?
11:12What role do company CEOs play in making these decisions?
11:15Look, I think we've seen an evolution in the world, and of course in Colombia, in the awareness of
11:23cybersecurity.
11:25Well, in economic terms, of course we see a larger budget in technology budgets for cybersecurity.
11:39I believe there is already a great awareness that today it is not possible to generate a technological project, be it intelligence
11:46artificial, whether you implement a web application, a CRM, an ERP, whatever you want, or something in the cloud,
11:54in the end.
11:55You can no longer think about implementing a project without having cybersecurity in that architecture.
12:01It would be impossible.
12:02It is a link in the necessary chain.
12:04It's right.
12:06But I also believe that in several boards of directors in this country, in several management committees, the issue of cybersecurity
12:14It's already a fact.
12:16And I'm not just saying this when we talk about cyberattacks for the theft of money per se.
12:21I also talk about the leak of information, because there is information that is super valuable, very important.
12:28A company's reputation.
12:31But the most important thing is how much it costs an entrepreneur to stop.
12:38The cost of a business stopping, the cost of not being able to serve its customers, the cost of not
12:44being able to produce any good, the cost of not being able to serve their customers, of the customer experience being
12:50damage.
12:51So, all that context and the examples, of course, that have occurred globally, make the issue of
12:59Cybersecurity is no longer just a matter of what we call the role of the CISO,
13:05He is not the one who manages security in a company, but rather someone who solves a problem for everyone.
13:09Because, look, Edwin, the CISO may have the best knowledge.
13:14It can happen, and it has happened to us; we've spoken with managers from several companies who say, "Juan Carlos, I've invested millions of..."
13:22dollars in my company, in cybersecurity, and I was attacked.
13:27And it turns out that you may have the best technology, but there was a lack of awareness at all levels of an organization.
13:35Well, he told him just now, didn't he? One.
13:36Oneself.
13:37Ultimately, who operates the systems?
13:38He is a human.
13:39And cybersecurity awareness isn't just for people in technology; it's for all levels of management—financial, administrative, and so on.
13:47employee.
13:48I don't know, look, I always say it, from the lady who helps us serve our coffee, to our assistants, everyone
13:56We need to know what phishing is.
13:59how to recognize a fake email, etc.
14:03So, all those things are combined, right? In terms of education, processes, policies, and technology.
14:10and managerial leadership in a company.
14:14So, what one would understand is that yes, let's say, people, CEOs, and boards of directors have already understood that
14:18This is a link in the chain that must be maintained.
14:20tightly bound to everyone else, because otherwise investing millions of dollars is useless if the human in
14:25lastly, because it's not connected.
14:27We're talking about 10.9 trillion attempted cyberattacks in 2025. Juan Carlos, which sectors are the most affected?
14:36Do they attack more?
14:37Which sectors have the greatest exposure and ultimately generate the most pressure on companies?
14:44Yes, look, I would say that nowadays all sectors are attacked, but obviously there is always, always a
14:51special interest in the financial sector, of course.
14:54Where is the money being kept?
14:56Where is the money stored?
14:58But we have also seen many cyberattacks in the public sector.
15:05The State?
15:05In the State.
15:07Moreover, many of the attempts you were talking about earlier, which we have repelled, are within the State.
15:15In the health sector, we have also seen a great deal.
15:19And in the industrial sector, I would say they are the first ones I've ever seen as such.
15:24And there's another one in particular, which is also a sector heavily targeted by cyber attackers, which is the sector of
15:32telecommunications, the country's telcos.
15:35There are also many attempted attacks against them.
15:39Lately, also in Colombia, we have seen a very important advance in small and medium-sized enterprises.
15:46We'll definitely talk a little bit about that, but also about that other area, and that's where we also generate that awareness.
15:52Because they think, no, I'm small, nothing's going to happen to me, no, who's going to think about
15:56Yes it's true.
15:56And there's a lot of it out there.
15:57That's right, we're already on our way there.
15:59But before that, I want to ask you, and that is, when one starts a business, since I'm talking about SMEs, one tends
16:07to contract many tools from different providers.
16:11And when one is a large company, and here I'm talking, for example, about those to which many of us belong.
16:16On this side, too, because sometimes it arrives at a different moment in the life of a project, one that offers
16:22better products, better services or better price.
16:26And then one tends to have many suppliers within the company or at home, let's say. It even happens in the
16:32home.
16:32Here you have a telephone provider, a television provider, an internet provider, but let's get back to the companies.
16:38How can we unify all these companies so that risk isn't practically an open door for each one?
16:46one of those companies, but that this is controlled?
16:48Look, Edwin, since the internet was born, I mean the commercial internet back in '98, well, that's where it all began
16:58cybersecurity.
16:59And at that time we were talking exclusively about antivirus software. That was basically it.
17:07Therefore, the history of cybersecurity has been very fragmented, because as it evolves
17:16digital world,
17:18Then different cybersecurity tools begin to emerge.
17:23So, of course, nowadays, regardless of size, especially in large and medium-sized companies,
17:29One finds that a company can have between 25 and 30 different cybersecurity solutions.
17:38And what one really tries to do is make cybersecurity simple, not complex.
17:45And when we see cases like this, it's in these cases that a general manager says,
17:52But why, if we've invested so much in so many tools?
17:55And the reality is that when you have so many tools, I'm going to tell you anything.
18:00One for cloud protection, another for email protection,
18:05another for the protection of cell phones and laptops, another to defend what we call the world of OT,
18:11from some, from one, let's call it for example an oil company that has sensors and pipelines and all this,
18:20And we must defend that entire ecosystem.
18:22So, there are so many solutions that, firstly, it becomes very complicated operationally.
18:29Today, to repel an attack, you have to repel attacks in milliseconds.
18:38So, I don't have time until I suddenly see what someone says
18:43tool and the other,
18:44And I connected manually, because there wasn't enough time.
18:46They've already stolen your information or your money, whatever it is.
18:50So, one, the operation, two, the economic cost, the economic cost of maintaining all those solutions is very complex,
19:00And precisely we at Fortinet do these exercises so that everything we put in place as architecture
19:07be automated, integrated, etc.
19:11And, well, finally, companies today, when they don't have fully correlated, integrated solutions, etc.,
19:21Well, they're starting to have a problem, which is also the education of a lot of people in different technologies that
19:30It becomes impossible.
19:31Of course, of course. Juan Carlos, I was thinking here about that dozen or so interviews I've done over the years.
19:38of journalistic life
19:39on the subject of innovation, and obviously you heard him talking about it as a chain of what I've seen.
19:44in the last 20 years,
19:46And I always asked all the company presidents, the CEOs, the CTOs of today,
19:52Well, how much of, say, of its budget should a company invest in innovation?
19:59And so there was always a percentage there, but now I want to shift that question to the world of cybersecurity,
20:05And if it's in a company's budget, then scale it up to the national level, the nation's general budget,
20:11Or at home, the budget one makes each month, what percentage should one allocate to taking care of oneself?
20:19cybercriminals,
20:20That is, to invest in cybersecurity.
20:22Look, it's an answer that you're going to tell me is a beauty queen's answer, sorry for the
20:30queens,
20:31No, but the reality is that it's very difficult to give that answer, why?
20:35Because each company has a different scheme and vision for its business, and what am I getting at with this?
20:44Before discussing technology in terms of cybersecurity,
20:48Well, a company has to do a risk analysis,
20:52and he needs to understand what his processes are, what his assets are,
20:59which are the most important so that they never expect anything to happen.
21:06So, for many clients, we do all that risk analysis of the companies,
21:14And depending on that, one says, hey, this company is at a maturity level A, B, C or D,
21:20And depending on that, the level of cybersecurity is tied to that.
21:26There are companies that, I don't know, I'm going to say a company that produces, I don't know, clothing,
21:33And if a cyberattack comes in through the production plant, rather than the IT department,
21:41through the production plant where the shirts are produced, where they are made,
21:44Well, for the whole company.
21:46Of course, online production is slowed down.
21:48So, in accordance with that risk analysis, there is a technology investment,
21:55cybersecurity.
21:57So what's going on?
21:59That nowadays, as things stand, and I would say for many years,
22:05We are dedicated to protecting the cybersecurity of the IT world.
22:09That is, from the data center, the servers, email,
22:13Web applications, of all this.
22:16And for several years now, we have focused not only on the digital world,
22:22in the world of IT, but the world of OT,
22:25which is that whole world that has to do with sensors,
22:29Moreover, even in a hotel, for example, a television with a camera,
22:33The air conditioning, which is all connected to a network,
22:37of everything that is connected to the network, which is all that part of Operations Technology,
22:42Well, there have been cases like that worldwide as well.
22:45And that's another very important part.
22:47And you know, it's a very interesting discussion that I'm about to tell you.
22:50At one point we worked for a very important company in Medellín,
22:53and the general manager, who, well, was a person of about 70 years old,
23:0075, 80 years old, I don't remember,
23:03He saw everything we had done as Fortinet with its technology area,
23:07And I was saying, hey, that's great, but what if the plant stops growing?
23:11Is something wrong with me?
23:12And obviously, it's the heart of the company.
23:16So these are lessons, lessons that we all learn along the way.
23:20and that today that world is also interconnected,
23:25segmented, but it connects in a cybersecurity study.
23:28Yes, of course, listen, you did give me an ambassadorial answer.
23:31Clear.
23:31Yes, yes, yes, it's true, he didn't give me the percentage.
23:33But it was indeed the ambassador's response.
23:34But it makes sense because every organization is a different world.
23:37And every company is different, just as every human is different.
23:41You spoke, you gave that answer,
23:43And I was thinking about the Internet of Things, right?
23:45Clear.
23:46Like the Internet of Things, and how everything is connected,
23:49When one goes to those Asian cities,
23:51And one realizes that everything is indeed connected,
23:53I can't imagine an attack, it blocks anything.
23:56That's how it is.
23:56So, well, that's when it clicked and I understood it better.
23:59You spoke about SMEs,
24:00So let's get into SMEs,
24:01small and medium-sized enterprises in Colombia,
24:03For those who don't know,
24:05It turns out that the Colombian productive system is like that,
24:08small and medium-sized enterprises.
24:09Approximately 95-96% of employability in Colombia,
24:14It is offered by small and medium-sized businesses.
24:18They are basically the ones who sustain the economy in Colombia.
24:21Right, Juan?
24:21So, sometimes you have to hire services from these companies.
24:24It's very expensive, very difficult,
24:26Setting up your own infrastructure is very expensive.
24:29How viable is it to adopt models that are called "as a service"?
24:35And what should an entrepreneur evaluate beforehand?
24:39a small or medium-sized business owner,
24:41before making a decision of this type?
24:43Yes, it's a reality.
24:45And we were talking about it not only because of what the cost means for a small business
24:49to acquire the technology as if a medium-sized company could do it
24:53or a corporate enterprise.
24:55But additionally, not only because of the acquisition cost,
24:59but also by the skills that a small company may have
25:05in cybersecurity.
25:07In fact, we all know that nowadays it's difficult to find people with knowledge
25:12Cybersecurity isn't easy, and I had a rough estimate.
25:18of about 15,000 engineers in Colombia due to a cybersecurity shortage.
25:2315,000?
25:2415,000.
25:25There's a job opportunity, isn't there?
25:27Total.
25:27In other words, those who are suddenly reading it,
25:30That's what Singapore did at one point.
25:32They read the market first,
25:34They understood how the industry needed X professionals
25:37and education was responsible for training those professionals
25:39to serve the market and, well,
25:41Singapore is already known to be one of the world's leading economies.
25:44That's right, and that's a paradox we always talk about.
25:47about unemployment figures and this and that.
25:49And in the technology sector in general,
25:52but especially in cybersecurity,
25:54It requires a lot of talent.
25:57And when you don't have the talent,
25:59Then it also begins to kind of build a bubble
26:01in terms of the wages of people who are working today,
26:04because he is here today,
26:05But then they need her on the other side.
26:07and a wage growth bubble is being created.
26:10So, for a small business it would be impossible
26:12to have a person inside their facilities.
26:16So, it has been developing for many years
26:19in the world of technology
26:22managed cybersecurity services.
26:25In Colombia we have many,
26:27And when I say many companies,
26:28It's not really two, three, four, five,
26:30Many companies are currently developing these services.
26:36And what those services offer is a constant operation,
26:40constant monitoring and management of cybersecurity.
26:43Obviously, when a customer chooses one of these companies,
26:47I'm referring to a small or medium-sized enterprise (SME).
26:48That's what we're here for,
26:50to give them guidance, of course,
26:51of this type of company,
26:52from their experiences,
26:53of their certifications,
26:55from their experiences in the projects developed.
26:59This is key.
27:00The key thing is that having someone do the service for you is one thing,
27:05I'm going to put it in colloquial terms,
27:07have someone do the service for you,
27:09cleanliness in your home,
27:10and he's going to use the broom,
27:13Your vacuum cleaner will be there.
27:15Own infrastructure.
27:16But let's say the data belongs to the company,
27:20They are not from the third.
27:21The same,
27:22your vacuum cleaner is yours,
27:23but the person who performs the service is used.
27:26So,
27:26in the end,
27:28the data,
27:29The data is the client's responsibility.
27:31It's like when you talk about a cloud project,
27:36No?
27:36So,
27:37in the cloud project,
27:39You're going to the cloud,
27:40to any of the clouds,
27:41And there's a term called shared responsibility.
27:46So,
27:47The cloud is responsible for the platform,
27:52but the data and access,
27:55of the person accessing,
27:56It is my responsibility as a customer.
27:58So,
27:59But that already exists.
28:00In Colombia we have Fortinet,
28:03several business partners,
28:05those who offer cybersecurity services.
28:08In fact,
28:09I'm going to tell you something about the history of Fortinet.
28:11When Fortinet started,
28:13Fortinet really started out for small and medium-sized businesses,
28:15at the time.
28:17Clear,
28:17We are already in the corporate world,
28:19for many years,
28:20etc,
28:20but we never neglected that part,
28:22because we know what small and medium-sized businesses mean.
28:25Listen,
28:26Juan,
28:26We're running out of time.
28:27But there are two issues that,
28:28Let's say that nowadays they affect almost all of us,
28:31Let's say those of us who at least have some kind of office job,
28:34Or we are immersed in technology and I don't want to finish the interview without forgetting them.
28:38One is artificial intelligence and the other is hybrid work.
28:41We'll start with hybrid work and then finish with artificial intelligence.
28:44I believe that's an unexplored world.
28:46You just said an iceberg.
28:47I believe that AI is still just that,
28:50But at some point it's going to be like energy.
28:52We're going to use everything.
28:53We're going to need everything.
28:54So for now it's just an iceberg that needs to be contemplated.
28:57So,
28:58hybrid work.
29:00How can we keep ourselves safe?
29:03For both the company and the employee.
29:06Yeah,
29:07I am probably working here today at the company where,
29:10Well, obviously they provide me with all the infrastructure and security,
29:13But tomorrow I'm working from home because there's hybrid work, and it turns out you're sending me on a trip.
29:18Or my newspaper from where I work sends me for a trip and I take my equipment,
29:23my phones,
29:24But there I had to connect to a network that wasn't my own.
29:28Well, because I'm in another country and that control is somehow out of my hands.
29:33So,
29:34What to do there?
29:34I mean,
29:35How can this be managed, and what recommendations do you have for hybrid work, especially for companies to protect themselves?
29:40When will they have employees like us in a hybrid move?
29:43Well,
29:44I would like to give you an example that I don't actually want to attribute to myself,
29:49It was installed by a professional here at Fortinet for a client,
29:52But I found it very educational.
29:54And it is,
29:56Imagine that you are going to enter a prison here in Colombia,
30:01No?
30:01So,
30:02Well, the entrance to that prison has walls,
30:06which is what we called the firewall,
30:08that the firewall separated the internal information.
30:12Before,
30:12Before, we really only played with internal information,
30:15No?
30:15There was no information in the clouds,
30:17not on Facebook,
30:18nor in short,
30:18so many things.
30:19Everything was on our own server.
30:20Everything was on our own server,
30:21internal,
30:21in an internal data center.
30:23But imagine you go to jail,
30:27They approve you,
30:28They give you access.
30:29Now,
30:30What are you doing inside the prison?
30:33That's not very well known, perhaps.
30:36Yeah?
30:37So,
30:38Imagine that in the digital world,
30:39No?
30:40I,
30:42as a user,
30:43I'm at home,
30:44and I'm going to access my company's data.
30:48The way we used to operate,
30:51Before this whole hybrid world emerged and the pandemic accelerated it all,
30:57A person was connecting to a tunnel called a VPN.
31:02And through that tunnel,
31:04you,
31:05if you didn't have the necessary filters,
31:08You could access a lot of the company's systems.
31:13Furthermore,
31:14suddenly even,
31:15You, who are a salesperson,
31:17For example,
31:18You suddenly gained access to the company's payroll system.
31:21And there weren't those kinds of controls.
31:23So,
31:24today,
31:25and actually coined by Gartner,
31:28about three years ago.
31:30The consulting firm.
31:31The consulting firm,
31:32Then the SASE mnemonic began,
31:36which means Secure Access Service Edge,
31:39and it's about being able to be anywhere,
31:43anywhere,
31:45Call a hotel,
31:45at an airport,
31:47etc,
31:48and access with all the cybersecurity conditions required for a person to access.
31:53So,
31:54What can be done from the laptop?
31:58from your cell phone,
31:58Where is that person connecting from?
32:00From there,
32:01It is identified whether Edwin is Edwin,
32:04that you are accessing,
32:05If the computer that Edwin has,
32:08the laptop that Edwin has,
32:09It is ready to access the network.
32:12That is to say,
32:13Edwin has the Mac OS or Windows system,
32:18and it's up to date with the patches,
32:22so that it does not have a vulnerability in the operating system,
32:24is up to date,
32:25If it's not up to date,
32:25I won't let you connect,
32:26Do it and come back.
32:29Now,
32:29Edwin is a salesman,
32:32Edwin only has access to these applications,
32:35And what privileges does Edwin have as a user?
32:38can update,
32:38can modify,
32:39in the end,
32:40so,
32:40all those kinds of topics,
32:43and in the end,
32:44most importantly,
32:45the data,
32:46what data can Edwin handle,
32:48what data can Edwin access,
32:50What data can Edwin download?
32:51What data can't Edwin download to his computer?
32:55which is what we are trying to avoid,
32:57What is a data leak?
32:59So,
33:00even today,
33:01with SASE systems,
33:03which we have also developed over many years,
33:06Hybrid work is starting to take off,
33:09in the end,
33:10the SASE world,
33:12It's a service we provide from the cloud,
33:15It is a cloud-hosted service,
33:19but also,
33:20Very important developments are being made at Fortinet,
33:24so that a customer can also have their own,
33:27like their own SASE POP,
33:29and to serve a number of users who will always be remote.
33:33So,
33:33It's a reality,
33:35Today, many customers already...
33:37and ourselves,
33:38already,
33:39You're not in the office all day,
33:41You're in meetings on one side or the other,
33:43But the important thing is that always,
33:44from the moment you log in,
33:46cybersecurity policies are in place.
33:48Hey Juan,
33:49This conversation with you has reaffirmed why,
33:52Yes, I have to listen to everyone at TED and the company,
33:56why do they really tell you,
33:58Enter the password,
33:59the authenticator,
34:00Enter the second setting,
34:02Is it really that necessary?
34:03because sometimes you want quick access,
34:04He has a quick and urgent meeting,
34:06and one doesn't,
34:07But why are they showing me that?
34:08Why does my computer turn off to update it?
34:10Well, that's how you start to understand.
34:11Well,
34:12And with this we conclude, Juan Carlos.
34:13Let's see.
34:14Artificial intelligence.
34:16Well,
34:17You use it,
34:18obviously to improve their cybersecurity systems,
34:22But criminals are also using them to try to bypass those barriers.
34:26I kept the word I'm saying now,
34:28like those walls.
34:31Well,
34:31How do we do it?
34:32How do we do it?
34:33Because entrepreneurs tell you,
34:35I interviewed a former CEO of a very important technology company this week,
34:39And he told me,
34:40Adwin,
34:40a person with a computer,
34:42internet connection and three artificial intelligence subscriptions,
34:46He sets up a startup in a weekend and by Monday he's monetizing it.
34:49I mean,
34:50He's already getting money.
34:52But it can also leave a lot of windows open for cybercriminals to get in,
34:57that also use artificial intelligence.
34:59So,
34:59Tell us about that.
35:00How are you using artificial intelligence to make a company like this more powerful?
35:05stronger,
35:06and above all,
35:07Let's say more autonomous?
35:08and also how to protect oneself from being so good at creating that which criminals also use for the same purpose.
35:16Yeah.
35:16Look,
35:17in the end,
35:19Artificial intelligence has been developing for many years.
35:24The thing is, it became very popular since the generative version came out.
35:31This one with ChatGPT.
35:32Yeah,
35:33four and a half years ago.
35:34Exactly.
35:35So,
35:36We believe that innovation goes hand in hand with it.
35:40That is to say,
35:41This is not something to slow down about.
35:43It's not something to slow down about,
35:45But it is important that we, from a cybersecurity point of view, see it from two aspects.
35:53One,
35:53We call one AI for security and another we call security for AI.
35:59Yeah?
35:59So,
36:00because?
36:01Security for AI.
36:02Because everything,
36:05Almost 85% are already doing something about cybersecurity.
36:10artificial intelligence.
36:12That's the reality.
36:14We were at an event last week and we were actually talking about how effective artificial intelligence is becoming.
36:22in the customers.
36:24And when projects are undertaken that are somewhat isolated from cybersecurity, highly technical,
36:31But there's no clear strategy for where I want to change my business,
36:37Well, it's very difficult and people get frustrated.
36:40In fact,
36:41We were talking about two very important concepts.
36:43What is a digital company and what is a smart company?
36:47A digital company is one that has used technology for many years to digitally transform itself.
36:53and be more agile,
36:55more effective,
36:56no longer have branches,
36:58but that you can do everything through a website,
37:01etc
37:01That's what it means to have been digital, and that's what we've been doing all these years.
37:05But being a smart company today means knowing how to use data,
37:09knowing how to use analytics and artificial intelligence with good data,
37:13with good data to gain an advantage and make better decisions.
37:17Now,
37:18But that requires,
37:19That's why I talk about Security for AI.
37:21Because when I start creating artificial intelligence environments,
37:26with artificial intelligence tools,
37:29Call it GPT chat,
37:31Grok,
37:31etc.,
37:32Gemini,
37:32Whatever you want,
37:34I have to be aware that I have to protect that LLM environment with cybersecurity.
37:41We already have very important solutions in that regard,
37:46In fact, it's called the Forti AI Gate,
37:47So our firewall is called Forti Gate and this one is called the Forti AI Gate
37:52and it is specialized to protect those cybersecurity environments that customers are starting to work in.
37:59But the other thing is AI for Security, and that's for all those cybersecurity service clients or companies.
38:09that protect SMEs or a large client that has its cybersecurity operations center,
38:16Well, what I was saying at the beginning,
38:18Previously, one would see a SOC,
38:20a 30-person cybersecurity operations center,
38:2350 people,
38:24reviewing a bunch of logs and points and connecting manually,
38:29Well, with artificial intelligence, the entire cybersecurity operation also improves.
38:36And that doesn't mean there aren't people working with artificial intelligence,
38:42Artificial intelligence automates many things,
38:44but with human supervision as well,
38:47but it becomes much more effective,
38:49responses in milliseconds, etc.
38:51So, prediction, especially prediction of what might happen.
38:54Oh, look, Edwin logged on at home.
38:58is connecting in the last month,
39:00always at 3 in the morning,
39:02to this billing system.
39:06Oh, hey, Edwin has the ability to update the inventory
39:10and set inventory prices for the company.
39:12Okay.
39:13So, even with predictions, you can start to achieve many things.
39:17And that's how cybersecurity has evolved with artificial intelligence
39:20for cybersecurity operations as well.
39:23So, of course, adoption is still being explored.
39:28Some companies are already more advanced than others, obviously.
39:32but we are not at the point of,
39:34No, wait, hold on a moment,
39:36be careful.
39:37No, no, no, come on, let's go ahead,
39:40But this is the cybersecurity environment
39:42that you need for your artificial intelligence environment.
39:44Well, Juan Carlos Puentes was there.
39:46in today's conversation in El Espectador.
39:49I am definitely going to take cybersecurity classes.
39:51So, first of all, thank you.
39:52because one truly confirms
39:54The important thing is to really follow the manual.
39:57that sometimes one wants to skip it
39:59And it turns out that's where one leaves the gaps.
40:02and the attackers enter.
40:03So, Juan Carlos, thank you for your time.
40:05No, not you, Edwin.
40:05Thank you for welcoming us to your Fortinet offices in northern Bogotá
40:09And well, for giving a lesson to those of us who don't know
40:11and to those of us who are interested in learning about cybersecurity
40:14in the midst of the fourth industrial revolution, which is the digital one.
40:18Thank you, Juan.
40:18And I'm missing something, this is your house.
40:19Thank you so much, Edwin.
40:20You already know that this information is saved.
40:22across the entire digital platform of www.elespectador.com
40:27And obviously we have distribution on our social media networks.
40:29See you next time.
40:31See you soon.
41:00Subscribe to the channel!
Comentarios