In recent years, Ecopetrol has developed a comprehensive cybersecurity strategy to improve its digital security posture. As part of this strategy, culture has been established as a priority to improve the general awareness of employees and the corporate mentality towards cybersecurity risks at the company. Transforming and strengthening cybersecurity culture and behaviors establish three pillars: Training (the development of new skills) Mobilization (driving and appropriating change) Communication (encouraging understanding and cyber-savvy behaviors) As part of the strategy of transformation and reduction of cyber risk, during the past year Ecopetrol has carried out some relevant actions: Established a Science, Technology, and Innovation month, where cybersecurity played a vital role in raising awareness about cyber risks. Various pieces of content were designed and distributed to more than 9,000 collaborators, 25,000 contractors, and officials of the subsidiaries of the Ecopetrol group on important topics such as phishing, secure passwords, good practice in corporate emails, and the use of information repositories. The company also created and strengthened a network of 300-plus champions or cyber guardians around the Ecopetrol group, with cybersecurity campaigns aimed at key processes in regard to, for example, exploration, projects, health, safety, and the environment. Generated innovative cybersecurity-related themes such as “the magic or thinking of Disney villains”, “in the minds of hackers” and “social engineering”. Held face-to-face conversations in different locations with more than 1,600 employees to promote the prevention of digital risks and the impact of cybersecurity in OT environments, using clear and simple language to explain the relevance of digital security in the day-to-day operations of the company. Ecopetrol is transforming the perception and culture of cybersecurity, making it innovative, close, and essential in the work and home environments. For this, the processes, resources, and support of senior management have been consolidated to implement short- and medium-term actions that make people the “human firewall” – the first and most relevant protection against digital threats.