As an observatory we have gone through several obstacles, but the cyberattack we suffered on October 29, 2022 was an experience we do not want to relive. That intrusion affected our daily operations and communications for months, and required monumental work to recover in 2023.

This led to the need for a radical change in our information systems security, which led to the creation of an internal group of specialists focused on cybersecurity: the CyberSecurity Advisory Team (CySAT). This team’s mission is to assist in the detection of security events, risk assessment, and to support the JAO’s cybersecurity policies and transversal processes. As part of that effort, since October, we have added new staff members to the ALMA Department of Computing (ADC), focusing both on our daily operations, as well as on cybersecurity tasks and projects, for which this new advisory committee is responsible.

Ricardo Carrasco arrived in October to fill the position of Cybersecurity Engineer. Since then, “It has been a very good experience. I have felt well received, and I have been able to notice the level and quality of the work that my colleagues are doing, which makes me very happy and motivated”, he says.

Together with the CySAT team, Ricardo is working on the 2024 cybersecurity plan, including the capabilities that will enable us to detect and respond effectively to cyberattacks and recover, if necessary. They are also focused on adopting a framework of best practice guidelines -called TrustedCI-, that will facilitate security in our operations. “It’s a great path that I’m excited to start, and I hope to be able to contribute a lot to these issues,” he adds.

It has undoubtedly been a contribution, since, with Ricardo’s arrival, the rest of the Advisory Committee members have been able to focus on more strategic tasks, while allocating 20% of their time to this expert team.

José Lobos, who is part of the group of administrators and IT specialists, and who participates periodically in CySAT, is also grateful for the arrival of new reinforcements: “They have been a contribution to the group, incorporating their knowledge and the vision that is needed to improve our systems and above all security,” he says.

After the cyber-attack, he sees that among the staff, “there has been a change, and it is the awareness that this happens and it is a daily occurrence. Unfortunately, we are facing criminal activity that does not stop. This is very dynamic, and we cannot let our guard down,” says José.