Mexican auditors find fewer cyber risk events at CFE with AIsaac

Mexico's Superior Audit Office checked reports from CFE's AIsaac-based security service and found that AI correlation of events reduced risk events in 2022. It gave no count.

  • Not rated an organization

    The auditors found that risk events fell but gave no count of the events or of any harm avoided.

Depth runs from 1, a convenience or time saved, to 5, a life or a livelihood preserved.

Status
Reported benefit.
Evidence

foundstudiedreportedclaimed

An independent audit report supports the benefit.

The system’s part
Not isolated. The auditors credit the reduction to AI correlation of events and real-time analysis, but they give no figures. They do not separate the machine-learning features from the correlator that uses rules or from the supplier's threat hunters.
Limits
Not yet checked.
Costs and harms
Not yet checked.
Later
Not yet checked.

Download data Cite Suggest a correction

Benefit type
Reduced Risk
System
Solución Avanzada de Detección de Amenazas y Respuesta por Inteligencia Artificial, Managed Detection and Response (MDR), delivered with Eviden's AIsaac tool
Made by
Eviden (Atos Group), maker of AIsaac. The service is supplied under contract 800961753 by Teliko Solutions, S.A.P.I. de C.V. and Grupo Vanguardia en Información y Conocimiento, S.A. de C.V.
Used by
Comisión Federal de Electricidad (CFE), corporate office, with its subsidiaries and affiliates
Where
Mexico
Stage
In routine use
Date
Kind
Protective response
Broad benefit
Monitoring Processes, Materials, or Surroundings, Analyzing Data or Information
Collections
Scrutiny and findings, Cross-border records, Safeguards
Last revised
31 October 2026

Sources

  1. Audit report, by authors with no tie to the system.

    Auditoría Superior de la Federación. Informe Individual del Resultado de la Fiscalización Superior de la Cuenta Pública 2022. CFE Corporativo, Auditoría de Cumplimiento a Tecnologías de Información y Comunicaciones 2022-6-90UJB-20-0040-2023 (Auditoría núm. 40), Resultado 5. Opinion issued 13 October 2023.

    a partir de la validación de reportes y gráficos obtenidos de la herramienta, se acreditó que se han reducido los eventos de riesgo mediante la correlación de eventos y análisis en tiempo real por medio de inteligencia artificial; sin embargo, existen deficiencias en los controles relacionados con la gestión de incidentes de ciberseguridad

Details

AI system

Workflow

The supplier's staff operated the AIsaac tool for CFE as a managed service. The service monitored security events in the public cloud, on the internet, at the network perimeter, in inbound and outbound traffic and in possible lateral movements.

Follow-up

Conditions for replication

CFE must validate the service's deliverables and reports. Incident handling needs procedures for extracting forensic evidence and keeping its chain of custody.

Entry details

Sector

Cybersecurity.

Purpose

Eviden (Atos Group) built the AIsaac platform to detect cyber threats and respond to incidents. CFE's suppliers run it as a managed service to strengthen the cybersecurity of CFE's technology.

Not yet checked: model, release, provider, role, configuration, inputs and outputs, autonomy, human oversight, AI contribution, beneficiaries, reach, distribution and access, duration, every measurement question, every money question, ownership and control, dependencies, cross-border connections, geopolitical implications, replication attempts, availability, institutional decision, grounds, action and result, success criterion, every evidence question, observed or intended, alternative assessments, related entries, other identifiers, category mappings.

Cite this record

Peter H. Vartanian. (2026). Mexican auditors find fewer cyber risk events at CFE with AIsaac (AIBD-0705). Artificial Intelligence Benefits Database, edition of 31 October 2026. https://petervartanian.xyz/aibd/records/AIBD-0705.html (archived at https://doi.org/10.7910/DVN/AADSII, version 4.0)

BibTeX Data Field definitions