In the central American region, the legal framework must guarantee the confidentiality of personal data. In terms of security policies, seven out of 10 large companies in central America claim to have them defined, dictating how employees should behave when using the company's computing resources, and how to use data in a confidential manner. However, in order to face growing vulnerabilities and risks, any internal policies or regulations established within companies need to be complemented with proper technology. In both El Salvador and the rest of the region, companies are rethinking their security strategies including their policies, work regulations and internal processes.