Organizational Consolidation

Technology and Information

2009 was a year of advances for Ecopetrol’s information assurance processes, which enabled it to fully comply with the guidelines established in the SOX Act.

Information assurance was consolidated under the COBIT* point of reference in 38 solutions with financial impacts and 10 that support operating continuity, as well as the Information Technology management system, supported by 28 control processes, 14 of which are crucial for SOX.

The latter were assessed by a third party and rated at maturity level III, which represents significant progress as regards our international benchmarks.

On another note, in response to the company's needs, the annual work plans made with 22 areas of the company were fulfilled 99.5%, achieving the following results, among others:

Infrastructure and Services:

  • Protection of the corporate computer center and the technical E&P platform in the Bogotá free trade zone, and the technological assurance of satellite processing centers (GRB, GRC and ICP).
  • 8 framework agreements with strategic partners in the incorporation of technology for the group.
  • “Core” corporate technical migration to enable new practices in processes (SAP, service bus, GIS)
  • Assistance and implementation of technological standards in the offices of subsidiaries in Peru and Brazil, as well as the delivery of IT services to ODL and Reficar subordinates.

    • Information Management:

  • SAP platform updating
  • Assurance of critical upstream (petrotechnical and volumetric) solutions and the design of a new solution for petrotechnical information management (GITEP).
  • Improvements in volumetric solutions to impact information quality and volumetric closing.
  • Migration, implementation and assurance of new Commercial and Sales solutions.
  • Updating of programming models in Refineries – ORION.
  • Implementation of the corporate information model for subordinates (ODL, Reficar, Peru, Brazil, America).

    • Information Security:

  • Create the security framework for internal information and the corporate group – SGTI, formalized by a policy approved by the Corporate Governance Committee for the Corporate Group.
  • Strengthening of information security practices in nearly 2000 collaborators, through workshops, safe workplace brigades, virtual courses and communication strategies.


    • Ecopetrol cumplió con la
    normatividad nacional e
    internacional relacionada con
    sus actividades como emisor de valores.

    *COBIT: The COBIT (Control Objectives for Information and Related Technology)
    methodology constitutes an international set of generally accepted standard as
    regards information security and control. It is one of the most relevant regulatory
    bodies worldwide in the area of Information Technology (IT) management.