The corp 130 final bundle equips the cybersecurity, information security and BSPC compliance team (Banco de México for financial institutions, CNBV, UIF). RFID-blocking laptop backpack, AES-256 encrypted USB with NOM-151 compliance, webcam privacy cover, physical incident-response and regulatory-compliance guide. The CFDI 4.0 invoice goes with 16% IVA and information-security expense deductibility.
The Mexican corporate operates under a robust cybersecurity regulatory ecosystem: the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), NOM-151 on data-message preservation, the Sole Banking Circular (CUB) of Banco de México, the General Provisions of CNBV, the General Rules of UIF for AML, and for the financial sector the Provisions of BSPC (Bureau of Supervision and Protection of the Financial System). Financial-services operators must comply with specific information-security controls under ISO 27001, NIST CSF and the local regulatory frameworks.
The non-financial corporate (retail, manufacturing, health, telecommunications, energy) also faces cybersecurity obligation under LFPDPPP, Telecommunications Laws and the specific sectoral frameworks (health under COFEPRIS, energy under CRE, transport under SCT). The corporate running critical infrastructure (power plant, hospital, bank, telecom operator) must comply with the cybersecurity requirements of the National Cybersecurity Strategy published by the federal government in 2024 and reviewed in 2026.
The corp 130 final bundle covers the daily equipment of the cybersecurity analyst working on-site (corporate office, data centre, SOC, remote office) and in field (client site visit, audit, incident response). The RFID-blocking backpack protects the analyst's laptop against unauthorised credential and card scanning. The encrypted USB complies with NOM-151 and enables secure transport of regulated files. The privacy cover blocks the laptop webcam during confidential meetings. The physical guide documents incident-response and regulatory-compliance protocols.
The fiscal regime of the cybersecurity kit operates under Article 27 LISR as information-security and training expense, with 100% deductibility. The CFDI 4.0 invoice carries 16% national IVA and is filed with the corporate compliance record. For corporates with border-zone operations, 8% IVA with Border Zone complement. The invoice serves as supporting documentation of the expense reported in the compliance audit.
The kit ships in a tamper-seal box with the analyst's name for personal use during the compliance cycle. Each piece carries the engraved corporate RFC and analyst identification code.
600D polyester backpack with RFID-blocking inner lining in main compartment (protection against unauthorised scanning of credential cards, passport, identification). Padded 17" laptop compartment, organiser front pocket, side bottle pocket, padded straps, mesh back. Silkscreen of corporate logo and analyst code. Black, navy blue or Oxford grey. Light-rain resistant.
USB 3.2 64GB memory with hardware AES-256 encryption, 7–15 character password and automatic wipe after 10 failed attempts. NOM-151 data-message preservation compliant. Windows, macOS and Linux compatible. Protective case with analyst identification and inventory barcode. Secure backup of regulated files, digital certificates, SSH keys and audit reports.
Sliding privacy cover for webcam in black ABS plastic, 18x8 mm dimensions, sliding mechanism that covers and uncovers the camera. Removable 3M adhesive that leaves no residue. Individual packaging in bag with code. Compatible with laptops, tablets and monitors. For corporates with robust security policy, the privacy cover is mandatory on all devices with webcam of the security and compliance team.
Printed manual on FSC-certified paper, 120 pages, soft cover, A5 format, content: cybersecurity incident-response protocol, escalation matrix, key contacts list (CSIRT, Banco de México, CNBV, UIF, cyber police), BSPC/LFPDPPP/NOM-151 compliance checklist, report templates, regulatory authority directory. QR code leading to updated digital manual. Limited print run with version seal.
The corp 130 final bundle invoices under USO CFDI D02 when booked as training expense, or I08 when booked as information-security expense. The invoice carries 16% national IVA with security-expense deductibility. For corporates with border-zone operations, 8% IVA with Border Zone complement. The invoice breaks down by piece with unit value and total.
The Mexican corporate with cybersecurity team deducts the kit as information-security expense under Article 27 LISR. For regulated corporates (banking, securities, insurers, AFORE), the spend is booked as part of the compliance budget and filed with the compliance area record. The CFDI 4.0 invoice serves as supporting documentation of the spend reported in the BSPC, CNBV or UIF audit.
For corporates with international operations, the kit ships within national territory with MXN invoicing. When the analyst resides abroad and operates remotely from the US, Canada or Europe, the kit ships to the analyst home with international carrier (DHL Express Worldwide or FedEx International Priority) and the invoice goes with 0% IVA for export. The spend is deducted as information security in Mexican permanent establishment.
The Mexican corporate with cybersecurity team runs an audit and compliance calendar: annual internal audit, semi-annual external audit for regulated sectors, quarterly penetration tests, semi-annual incident-response drills. The kit ships to each new analyst on hire and renews annually or when the previous kit is lost.
The corporate with 5 to 50 analysts runs scheduled deliveries per quarter or semester. Delivery goes to analyst home or SOC office with specialised carriers and 1–3 day transit for urban deliveries, 2–5 days for other-city deliveries. The invoice goes per delivery with per-piece and per-analyst breakdown.
Production runs 15 to 20 business days for series of 20 kits or more, with 25 to 30 days for series above 100 kits. For urgent deliveries (new analyst with immediate start), we run a minimum batch of 10 kits with 8–10 business days production time. Urgent delivery operates with extra charge for reduced production time and insured express carrier.
Yes. The backpack carries inner RFID-blocking lining (metallised fabric that blocks 10 MHz to 3 GHz frequencies) in the main compartment, protecting credential cards, passport, identification and NFC devices against unauthorised scanning. The test runs at factory with test card and RFID verifier. Compliance documentation is filed with the corporate record.
Yes. The USB operates with hardware AES-256 encryption and complies with NOM-151 on data-message preservation, making it acceptable as backup for regulated files before the authority. For corporates requiring FIPS 140-2 Level 3 security, we run USB with FIPS certification at an extra cost of MXN $480 per unit. NOM-151 documentation is filed with the compliance record.
Yes. The physical guide updates annually with regulatory and protocol changes. The digital version is available via QR and updates monthly with security bulletins. For corporates with multiple analysts, we run limited print runs with version and validity-date seal. The guide covers BSPC, LFPDPPP, NOM-151 incident-response protocol and specific sectoral frameworks.
Yes. For corporates in specific regulated sectors (banking with CNBV/BSPC, securities with CNBV, insurers with CNSF, AFORE with CONSAR, fintech with CNBV, health with COFEPRIS, energy with CRE), we run additional guide versions with specific sectoral protocols. Each sectoral version carries an extra cost of MXN $250 per unit and updates with current regulation.
Yes. For corporates with SOC (Security Operations Center) of 20 to 200 analysts, we run mass deliveries with safety stock. The annual contract includes replacement for lost or damaged kit with 5 business days response time. The invoice goes per delivery with per-analyst and per-RFC breakdown. For distributed SOCs across multiple cities, we run per-site deliveries with specialised carriers and coordinated transit time.