Diagnóstivo y línea base de los activos de la información e infraestructura crítica para la gestión de ciber seguridad del estado ecuatoriano, utilizando CSF NIST

Abstract

This study provides a comprehensive overview of the current state of cybersecurity in the country, clearly identifying its strengths, weaknesses, and areas for improvement. It offers a valuable baseline for future evaluations and for informing the development of strategies in this area. To this end, the following objectives were achieved: a) Conduct a diagnosis and establish a baseline of Ecuador's state cybersecurity information assets and critical infrastructure, b) Collect information on Ecuador's critical cybersecurity information assets and infrastructure, c) Conduct a thorough assessment of the current situation of identified information assets and critical infrastructures. A qualitative approach has been used through a literature review to establish the context and current situation. Ecuador's critical infrastructure has been classified into 7 sectors: water, electricity, health, military, telecommunications, oil, and gas. The study also evaluates Ecuador's cybersecurity maturity using the CMM model, mainly placing it in the initial stages of "formative" and "implemented. Keywords: critical infrastructures, baseline, information assets, cybersecurity