Colombia denies irregularities in cyber contract

The Colombian government denied irregularities in a cybersecurity contract and said the information circulating about the award did not reflect the actual status of the process, according to Infobae Colombia on July 18, 2026.

Official clarification on the award

The state entity involved said there was no improper award and that the award date was clarified to correct public versions of the process. With that position, the government sought to dispel questions that had grown around the contract.

The clarification focused on the status of the procedure and the timeline for the award, two points that, according to Infobae Colombia, had been presented incorrectly in the circulating information. No further details were provided in the material on the amount, the specific purpose of the contract, or the contracting entity.

A tighter regulatory backdrop

The case comes as Colombia continues to add major regulatory changes tied to risk management and document control. Among the sources available is Law 2573 of 2026, described as a rule that imposes verification and documentation obligations on financial and telecom entities in cases of identity theft.

That framework intersects with the existing personal data protection regime, Law 1581 of 2012, which remains the reference point for handling sensitive information and data management across sectors. It is also joined by the new customs sanctions regime approved by Congress, another area increasing pressure on internal procedures and document traceability in public and private entities.

At the same time, the listed sources include material on DIAN's approval of the bill for the new customs sanctions regime, as well as official Ministry of Justice communications about an initiative that has already become law for faster and more effective justice. Although those texts are not directly part of the cybersecurity contract issue, they place the discussion in a regulatory environment where formal controls carry more weight.

Public contracts and cybersecurity

The reference to the cybersecurity contract also points to the growing importance of these purchases in the public sector. The available material does not describe the contract's technical scope, but it does show that any dispute over award timing or dates can carry reputational and administrative consequences when the issue involves digital security services.

In this case, the government chose to deny irregularities and to specify the award date. That is, for now, the official version cited by Infobae Colombia and the only verified information in the material provided.