Costa Rica ranks second among Central American and Caribbean countries in cyber resilience, with a score of 53%, according to the Regional Cyber Resilience Ranking prepared by SISAP.
The result places the country just one percentage point behind the Dominican Republic, which leads the ranking with 54%. Panama follows in third place with 49%, while Colombia ranks fourth with 48%.
The result reflects progress in Costa Rica’s ability to prevent, respond to and recover from cyber incidents, while also highlighting the need to continue strengthening national capabilities as the digital threat landscape evolves.
The Dominican Republic Leads the Regional Ranking
The ranking shows a relatively narrow gap between the top two countries.
The Dominican Republic records 54% cyber resilience, followed by Costa Rica with 53%. Panama stands at 49% and Colombia at 48%. El Salvador records 41%, Guatemala 39%, Honduras 34% and Nicaragua 32%.
These figures are intended to reflect differences in countries’ preparedness and their ability to respond to and recover from cybersecurity incidents.
Cyber Resilience Goes Beyond Protecting Digital Systems
Cyber resilience is not limited to installing cybersecurity tools.
It also means that organizations can detect threats, respond to incidents, maintain essential services and restore operations following an attack.
This approach is consistent with the priorities established by Costa Rica’s Ministry of Science, Innovation, Technology and Telecommunications (MICITT) through its National Cybersecurity Strategy 2023–2027.
The strategy is built around five main pillars: infrastructure protection and cyber resilience; governance and coordination; legal and regulatory frameworks; education, training and awareness; and cooperation and partnerships.
Government and Financial Services Face Significant Exposure
Despite its favorable position in the regional ranking, Costa Rica remains economically exposed to potential cyberattacks.
According to the SISAP analysis, the government sector has the highest potential economic exposure, with estimated losses of US$190.9 million, equivalent to 0.53% of GDP.
Financial services follow with a potential exposure of approximately US$177 million, while manufacturing accounts for around US$124.4 million. Retail and technology are also among the sectors facing significant potential impacts.
The figures illustrate why cybersecurity has become increasingly connected to economic continuity and the protection of essential services.
Artificial Intelligence Creates New Challenges
The rapid development of artificial intelligence is adding another layer to cybersecurity challenges.
Organizations are adopting AI tools at a pace that can, in some cases, outstrip the development of internal controls and governance mechanisms.
The increasing use of AI therefore requires organizations to consider not only the opportunities offered by the technology but also how corporate data is handled, who has access to AI tools and how these systems are integrated into existing security policies.
SISAP has emphasized that Costa Rica will need to continue strengthening its cybersecurity capabilities, specialized talent and governance as artificial intelligence becomes more widely adopted.
A National Strategy Focused on Prevention and Recovery
Costa Rica’s National Cybersecurity Strategy 2023–2027 aims to establish a secure, resilient and inclusive national cybersecurity ecosystem.
The strategy seeks to strengthen the country’s ability to prevent and mitigate digital risks, improve incident response capabilities, encourage cybersecurity innovation and promote a stronger culture of digital security.
Its first pillar specifically addresses infrastructure protection and cyber resilience, recognizing the importance of protecting systems whose disruption could have significant consequences for society and the economy.
Costa Rica Has a National Incident Response Team
The country also has the CSIRT-CR, Costa Rica’s National Computer Security Incident Response Team, which operates under the cybersecurity structures of MICITT.
The ministry identifies CSIRT-CR and the National Security Operations Center (SOC-CR) as part of its cybersecurity capabilities and provides a 24/7 service for cybersecurity-related incidents.
These structures are designed to strengthen coordination and response when institutions face cybersecurity threats.
A Strong Regional Position, but an Ongoing Challenge
Costa Rica’s second-place position represents a positive indicator within the regional cybersecurity landscape.
However, the ranking does not mean that the country is free from cyber risks. The continued digitalization of businesses and public services, combined with the rapid adoption of artificial intelligence, creates new challenges that require continuous investment and adaptation.
SISAP has emphasized that maintaining Costa Rica’s position will require continued development of technical and human capabilities, cybersecurity governance and incident-response mechanisms.
Cybersecurity Is Increasingly Linked to Economic Continuity
The results also demonstrate that cybersecurity is no longer simply a technological issue.
A cyberattack that disrupts systems, exposes sensitive information or interrupts operations can directly affect companies, government institutions and essential services.
For this reason, the ability to anticipate threats and restore operations quickly has become increasingly important for economic continuity and public confidence in digital services.
Costa Rica’s challenge will be to consolidate the progress already made while continuing to develop a digital ecosystem capable of adapting to new and increasingly sophisticated threats.
Official and Reference Sources
The Regional Cyber Resilience Ranking figures come from the SISAP study and were reported by regional media in August 2026.
For information about Costa Rica’s national cybersecurity policies, the article consulted the Ministry of Science, Innovation, Technology and Telecommunications (MICITT) and its official National Cybersecurity Strategy 2023–2027.
