Background on Infonavit and its Relevance
The Instituto del Fondo Nacional de la Vivienda para los Trabajadores (Infonavit) is a Mexican government-owned mortgage finance institution. Its primary mission is to provide affordable and adequate housing solutions for working individuals. In 2024, Infonavit played a crucial role in supporting nearly 306,000 individual credit disbursements totaling around 200,000 million pesos and ended the year with assets valued at 2.5 trillion pesos.
Investment in Technology and Cybersecurity
Infonavit allocated 2,362 million pesos to Information and Communications Technology (TIC) during 2024, accounting for 31.7% of its operational and investment budget. Seventy-seven percent of this investment went towards acquiring computing equipment, software licenses, and technological developments.
Prominent technology providers like IBM Mexico and Lenovo secured the most significant contracts for software licensing, support, and technological infrastructure modernization.
ASF’s Audit Findings and Recommendations
The Auditoría Superior de la Federación (ASF) conducted an evaluation of 18 critical security domains within Infonavit’s systems. While 15 domains showed an acceptable level of security, three areas required strengthening, according to the 2024 Fiscalization Superior Report on Public Accountability.
The ASF recommended that Infonavit enhance its cybersecurity policies, processes, and controls to bolster audit record management and improve the understanding of risks associated with its critical processes.
Additionally, the ASF emphasized the need to reinforce email protection measures and web browser security while expanding cybersecurity training and institutional digital culture programs.
Key Actions and Ideas
- Investment in TIC: Infonavit invested 2,362 million pesos in TIC during 2024, prioritizing computing equipment, software licenses, and technological developments.
- ASF Audit: The ASF assessed 18 critical security domains within Infonavit’s systems, identifying three areas requiring improvement.
- Recommendations:
- Strengthen cybersecurity policies, processes, and controls.
- Improve audit record management.
- Enhance understanding of risks associated with critical processes.
- Reinforce email protection and web browser security measures.
- Expand cybersecurity training and institutional digital culture programs.
Key Questions and Answers
- Q: What is Infonavit? A: Infonavit is a Mexican government-owned mortgage finance institution that aims to provide affordable and adequate housing solutions for working individuals.
- Q: How much did Infonavit invest in TIC during 2024? A: Infonavit invested 2,362 million pesos in TIC during 2024.
- Q: What did the ASF find during its audit of Infonavit’s cybersecurity controls? A: The ASF identified three areas within Infonavit’s 18 critical security domains that required strengthening.
- Q: What recommendations did the ASF make to Infonavit? A: The ASF recommended that Infonavit enhance its cybersecurity policies, processes, and controls; improve audit record management; reinforce email protection and web browser security measures; and expand cybersecurity training and institutional digital culture programs.
