Indra launches AI-powered SOC in Colombia

Indra announced in Colombia a Cybersecurity Operations Center, or SOC, built with artificial intelligence, automation and AI agents to sort alerts, detect anomalous behavior and prioritize events that require intervention. The reported coverage extends to Colombia and Latin America, and the process keeps human oversight in place during analysis and containment.

What changes with this SOC?

The center is designed to speed up the first reading of alerts and organize the response to security incidents. According to information attributed to Indra by Infobae, it can detect critical incidents in less than 10 minutes and cut investigation and resolution times by up to five times, although that figure is presented as a company estimate rather than an independent measurement.

Coverage published by several media outlets in Colombia also describes a continuous operation spanning detection, containment and recovery. Luz Noticias said the initial analysis of an alert, which could traditionally take up to half an hour, would fall to four or five minutes through classification and prioritization algorithms.

360 Radio reported that the IndraMind SOC in Colombia is aimed at a preventive model, using artificial intelligence to identify suspicious behavior and speed containment decisions. That report also presented it as infrastructure built for organizations and essential services.

El Tiempo framed the center's renewal around the protection of organizations and critical infrastructure in Colombia and Latin America. International Business Times, meanwhile, placed it within IndraMind Cybersecurity and said it is aimed at public and private organizations, critical infrastructure and essential services, with partial automation of alert analysis to speed up investigations.

Notimérica added that Indra presents the SOC as proactive, autonomous and intelligent, with automation and artificial intelligence integrated natively, as well as data sovereignty, data control and technological independence. Those features were attributed to the company in that publication.

What risks is it meant to cover?

The regional backdrop includes fraud schemes that use generative AI to impersonate voices, images and videos, along with phishing messages that appear official. Colombia.com reported that these materials can push victims into fake pages or trick them into downloading malicious documents.

The same coverage cited a security source that recommended combining technical verification, verification habits and common sense. The warning signs mentioned include unexpected urgency, unusual requests and audiovisual inconsistencies.

La FM also reported in the Colombian context that generative AI can be used to create realistic audio and images, and repeated recommendations for spotting urgent requests, unusual demands and inconsistencies in audio, images and video.

Tire Rescue added, according to a guide published on that site, that synthetic videos with eye and facial movements could be used to bypass liveness checks in digital wallets such as Nequi after an attacker takes control of the victim's phone number. That source did not provide a verifiable individual case or official data confirming the incidence, so that scenario remains a warning from the guide and not a proven fact.