Modelo de madurez de ciberseguridad para infraestructuras criticas caso de estudio: Ecuador

Abstract

In the digital age, critical infrastructure, financial systems, and even national security are at risk from cyberattacks, so countries must adopt a comprehensive approach to protect themselves from the growing threat of these. Therefore, this study proposes a cybersecurity maturity model focused on critical infrastructures for the Ecuadorian state called ECU-C2M2, based on the Cybersecurity Capability Maturity Model (C2M2). The objectives set to carry out this research were: a) Carry out a theoretical study on the different maturity models for Critical Infrastructures, b) Carry out an information survey based on the existing information from government pages, c) Propose a cybersecurity maturity model for Critical Infrastructures. For the creation of the model, a comparative analysis of existing cybersecurity maturity models was carried out, as well as checking their domains and subdomains. The study also presents an analysis of cybersecurity in Ecuador, with the aim that the proposed model is aligned with the country's needs and allows collaboration and cooperation between different entities, both governmental and private sector. Keywords: ECU-C2M2, cybersecurity, critical infrastructures