Colombia suspends state cyber procurement

Temporary suspension of the process

Colombia Compra Eficiente has suspended for an initial 30-day period process CCENEG-094-1-2026, which was intended to structure a future framework price agreement for cybersecurity goods and services for public entities. The measure was formalized in Resolution 463 of July 24, 2026.

According to the agency in comments to El Tiempo, the decision followed observations from the Procuraduría General de la Nación and the receipt of 5,652 comments from interested parties in the call for bids. The agency is now reviewing the objections and deciding on next steps.

The suspension does not end the call. Colombia Compra Eficiente said the process can resume before the 30 days are up if the issues behind the measure are resolved. The resolution also allows the suspension to be extended if the conditions that led to the decision continue.

What the Procuraduría flagged

On July 22, 2026, the Procuraduría General de la Nación said it had detected alleged inconsistencies in the process to implement [cybersecurity tools](/en/news/colcert-warns-charlie-telecom) in public entities nationwide and asked the agency to clarify critical points to ensure fair participation conditions.

In its official statement, the oversight body described its role as strictly preventive. It said it does not suspend the process or replace Colombia Compra Eficiente's authority, and that its aim is to anticipate risks, strengthen transparency and ensure objective participation conditions.

The Procuraduría also urged the agency to consider technical working groups with manufacturers, vendors, integrators, experts, industry associations and purchasing entities before moving forward with the final stages of the reviewed process.

Among the issues raised, it asked for clarification on the real plurality of bidders, dependence on manufacturer authorizations, the possible existence of single channels, brand selection in secondary operations, the economic evaluation methodology, exchange-rate risk handling, experience requirements, staffing conditions, technical scoring factors, and possible inconsistencies among the bid terms, annexes, forms and contract draft.

Process value and public reaction

The Procuraduría described the process as worth nearly 300 billion Colombian pesos, referring to the value of the contract for cybersecurity tools for public entities. Semana also reported that the contract or selection process was valued at almost 300 billion pesos and was suspended for a month after the watchdog's warnings.

In an internal communication cited by Semana, Yenny Liseth Pérez, Colombia Compra Eficiente's deputy director of business, announced the temporary suspension order for the selection process for a price agreement for the cybersecurity services acquisition system, for 30 days or sooner if the circumstances behind the measure disappear.

La FM added that Colombia Compra Eficiente publicly defended the process and said that since mid-2025 the framework agreement had been developed with technical support from the Ministry of ICT, and that technical working sessions with industry and state entities had already taken place. That point softens the criticism over an alleged lack of sector participation.

The same outlet said one of the Procuraduría's main concerns is that the tender rules could limit the real plurality of bidders and create heavy dependence on manufacturer authorizations, with the risk that choosing a brand would reduce effective participation to one or a few suppliers.