Strengthening Cybersecurity While Driving Digital Innovation
govciooutlookapac

Strengthening Cybersecurity While Driving Digital Innovation

Jorge Peralta Iven, Director of Information Technology and Telecommunications, Mexcico National Lottery

Jorge Peralta Iven, Director of Information Technology and Telecommunications, Mexcico National Lottery

Jorge Alejandro Peralta Iven is a seasoned technology leader with a degree in Computer Science, studies in Electronics and Communications Engineering and a Master’s in Information Security from the International University of La Rioja. He also holds certifications from MIT in Blockchain, Machine Learning, Leadership in Innovation and Digital Transformation, as well as a Corporate Finance Certification from MIU City University in Miami. Over nearly 30 years, he has driven digital transformation across industries, earning recognition as one of the “Top 100 CIOs of Mexico” and receiving the “Cybersecurity Latam Award” in 2023 and 2024. His public sector roles include modernizing systems for the Metro and representing it before the World Bank. He actively participates in national and international workshops, including initiatives in the Senate of the Republic on Artificial Intelligence.

Currently, he serves as the Director of Information and Telecommunications Technologies at the National Lottery, leading technological modernization and information security initiatives. Through this article, Iven emphasizes on how the National Lottery has strengthened its cybersecurity framework, embraced digital transformation through initiatives like CISS and alegríaloteria.com and set a benchmark for innovation and security in the public sector.

At a Glance:

• Strengthening Cybersecurity: Implementation of the Comprehensive Information Security Service 2025 (CISS) to protect digital assets and ensure long-term resilience.

• Crisis Response: Strategic initiatives developed in response to a major cybersecurity incident in 2021, setting a new benchmark for government cybersecurity.

• Digital Innovation: Launch of alegríaloteria.com — a secure, open-source digital platform aimed at expanding market reach and boosting sales.

Strategic Initiatives: Advancing Security and Operational Efficiency

One of my signature projects is the “Comprehensive Information Security Service 2025 (CISS).” This initiative integrates multiple layers of security to protect the organization’s digital assets by:

• Security Services: Providing specialized IT, communications and cybersecurity support.

• Information Protection: Utilizing advanced solutions to safeguard sensitive data.

• Technical Management: Leveraging certified personnel to manage various security technologies.

• Process Enhancement: Strengthening security processes and controls in line with best practices and international standards.

• Risk Mitigation: Implementing required technological controls to ensure the integrity, confidentiality and availability of critical information.

The CISS project met the National Lottery’s commercial goals and laid the groundwork for future digital security advancements in the public sector.

Navigating IT and Telecommunications Challenges: Strengthening Cybersecurity Post-Crisis

When I arrive to my actual job at Mexico National Lottery, I begin the implementation of the “Comprehensive Information Security Service 2025 (CISS)” at the National Lottery was one of the most significant challenges faced by the entity, particularly in response to a major cybersecurity incident. On May 14, 2021, the entity’s main data center experienced a cybersecurity incident. According to the analysis conducted by the specialist hired to evaluate the incident, the cyberattack primarily penetrated the entity’s internal network, possibly through phishing emails impersonating a senior executive or the institutional image and as a result an encryption of all the information via ransomware.

This incident highlighted critical vulnerabilities and catalyzed the creation of a comprehensive response framework to bolster cybersecurity measures. As a result, I begin the implementation of several pivotal initiatives were developed:

• Information Security Management Framework (ISMF): Established to manage and mitigate information security risks comprehensively.

• Enterprise Risk and Incident Security Committee (ERISC): Formed to oversee the management of security incidents and cybersecurity risks across the entity.

• Information Security Committee: Tasked with continually updating and enforcing security policies and practices.

• Dual Data Center Strategy for Redundancy: Implemented to ensure continuity and resilience of operations by maintaining a secondary backup data center.

These measures were part of the SISI project’s broader scope, aiming to address the immediate impacts of the cyberattack and to fortify the entity’s long-term cybersecurity infrastructure. The challenge was formidable, but the response has set a new standard for cybersecurity in the government sector, ensuring that the National Lottery is better protected against future threats.

Technological Advancements: Open-Source Innovation Meets Robust Cybersecurity

In its drive for innovation and digital inclusion, the National Lottery launched alegríaloteria.com—a pioneering digital platform developed entirely with open-source technologies and a modern microservices architecture. Designed to offer robust cybersecurity and an engaging user experience, this portal has:

• Expanded market reach by attracting a younger demographic (ages 20 to 30), thereby diversifying its traditionally older customer base.

• Increased sales by optimizing processes and adopting advanced e-commerce and digital marketing strategies.

• Reinforced the Lottery’s commitment to innovation and digital security, paving the way for future growth in the digital realm.

Advice for Aspiring Leaders: Balancing Technology, Business and Security

For IT professionals aiming for leadership roles in the lottery sector, Jorge offers the following guidance:

• Industry Expertise: Develop a deep understanding of the lottery’s regulatory landscape, technological infrastructure, and market dynamics.

• Embrace Digital Transformation: Stay ahead by mastering advanced technologies such as blockchain, artificial intelligence, and cybersecurity.

• Integrate Business Acumen: Balance technical skills with knowledge in financial management, strategic planning, marketing, and customer service.

• Focus on Security: Prioritize robust security frameworks and ensure compliance with governmental regulations, given the high stakes involved.

• Team Development: Invest in training and foster an environment of innovation and creativity, empowering your team to continuously improve.

• Crisis Management: Build strong crisis management capabilities to swiftly and effectively handle technology failures, security breaches, or public relations challenges.

Digital transformation is reshaping the lottery industry worldwide. By adopting sophisticated technologies like encryption and blockchain, lotteries are enhancing the security and reliability of transactions and increasing transparency and participant trust.

Weekly Brief

ON THE DECK

Read Also

Creating Resilient Security Ecosystems for Smart Cities

Christopher Harper, Security Manager, City of Reno

Crafting A Secure And Inclusive Digital Future

Tom Kureczka, Chief Information Officer, City of Winston-Salem

When Technology Meets Human-Centered Leadership

Kevin Wilkins, Chief Information Officer, City Of Fort Collins

Finding a Path to Practical and Successful Data Governance

Bojan Duric, Chief Data Officer, City of Virginia Beach

Who We Are and What We Do

Nicholas Thorpe, Director of Emergency Management, Franklin County

Embracing Technology in the Government Sector

Kevin Gilbertson, Chief Information Officer, State of Montana