SISBIN (Sistema Brasileiro de Inteligência)
acronymsecuritygovernance & risk
The Brazilian Intelligence System, established in 1999, coordinating intelligence activity across federal bodies with ABIN as its central organ.
The Brazilian Intelligence System, established 1999. Its communications security centre, founded 1982, develops sovereign cryptographic algorithms rather than importing them.
Worth an entry here for one component rather than for the system itself. CEPESC, the communications security research centre inside ABIN, was created in 1982 for a specific and clearly stated reason: Brazil could not guarantee the confidentiality of its own government communications. It develops state cryptographic algorithms - meaning sovereign, nationally designed cryptography rather than imported implementations. That is a decision several countries make and it carries a real trade-off worth understanding. Cryptography reviewed by the global research community benefits from decades of adversarial analysis by people with no stake in whether it holds; national cryptography is reviewed by a much smaller group, often one that cannot publish. The argument for it is that an imported implementation is trusted on somebody else's word, may contain weaknesses its authors know about, and can be withdrawn or restricted by an export regime - which is not hypothetical, since export controls on cryptography shaped what was legally shippable for decades. The argument against is that fewer eyes find fewer flaws. Neither argument wins outright, and a country's position on it usually reflects how much it expects to be able to trust its suppliers. The intelligence system also connects to the incident-response layer through the government response team serving federal administration, alongside the national team that serves the public - a separation that most countries maintain and that is worth understanding, because they answer to different people and publish very different amounts.
Also known as: sisbin, abin, sistema brasileiro de inteligencia
Sources
- Brazilian Law 9.883/1999 establishing the Sistema Brasileiro de Inteligência with ABIN as its central organ
- Civil society technical note to the Brazilian cybercrime inquiry: CEPESC created in 1982 within ABIN to address the country's inability to guarantee confidentiality of state communications, developing state cryptographic algorithms; the map of Brazilian incident-response groups including CTIR Gov and CERT.br
- Decree 11.693 reducing the SISBIN collegiate body and refocusing it on specialists from member organs