# Colombia — regulatory framework

## Country

- **English:** Colombia
- **Local (Spanish):** Colombia

## Local term

**Infraestructura Crítica Cibernética (ICC).** Used by CONPES 3854 and the
sectoral regulators. The Ley 2300 de 2023 modernizes the digital security
framework and introduces explicit obligations for operators, although a
unified ICC registry has not been published as of 2026-05.

## Regulator / agency

**ColCERT** · Equipo de Respuesta a Incidentes Cibernéticos. Operates
under the **Ministerio de Tecnologías de la Información y las Comunicaciones
(MinTIC)** umbrella, with coordination from the **Consejo Nacional de
Seguridad Digital**.

## Legal framework

- **CONPES 3854** · Política Nacional de Seguridad Digital.
  https://colaboracion.dnp.gov.co/CDT/Conpes/Económicos/3854.pdf
- **Decreto 338 de 2022** · Estrategia digital del Estado.
- **Ley 2300 de 2023** · Modernización del Marco de Seguridad Digital
  (incluye obligaciones para operadores).
- **Ley 1581 de 2012** · Protección de Datos Personales (Habeas Data).
  Regulator: **Superintendencia de Industria y Comercio (SIC)**.

## Sectoral regulators

| Sector | Regulator | URL |
|---|---|---|
| Banking & finance | Superintendencia Financiera de Colombia | https://www.superfinanciera.gov.co |
| Telecommunications | CRC · MinTIC | https://www.crcom.gov.co · https://www.mintic.gov.co |
| Electricity & gas | CREG · SuperServicios | https://www.creg.gov.co · https://www.superservicios.gov.co |
| Water & sanitation | CRA · SuperServicios | https://www.cra.gov.co |
| Health | Superintendencia Nacional de Salud · MinSalud | https://www.supersalud.gov.co |
| Transport (aviation) | Aerocivil · Supertransporte | https://www.aerocivil.gov.co |
| Public infrastructure | ANI · INVIAS | https://www.ani.gov.co |

## Official registry availability

**Partial.** ColCERT and sectoral regulators publish guidance but no
unified ICC registry. Mapping requires sectoral cross-reference. The
operator dataset in this package is community-curated and confidence-banded
accordingly (see [README.md](README.md)).

## Identifier format

**NIT — Número de Identificación Tributaria.** 9-digit body + 1 verification
digit, separated by a hyphen (`XXXXXXXXX-X`).

The verification digit (DV) is computed using DIAN's modulo-11 algorithm
established in Orden Administrativa 4 de 1989. The fixed weight sequence
`[41, 37, 29, 23, 19, 17, 13, 7, 3]` is applied left-to-right to the 9-digit
body (padded with leading zeros where needed).

Validator: [`src/normalizers/nit-co.ts`](../../../src/normalizers/nit-co.ts).

## Last updated

- Source verification: 2026-05-25.
- Adapter status: community-curated (alpha).

## Sources

- ColCERT: https://www.colcert.gov.co
- MinTIC: https://www.mintic.gov.co
- DIAN (NIT lookup): https://www.dian.gov.co
- CONPES: https://www.dnp.gov.co/Conpes/conpes-de-economia
- Ley 1581 de 2012: http://www.secretariasenado.gov.co/senado/basedoc/ley_1581_2012.html