Bibliographic citations
Garibay, A., Muñoz, A. (2024). Marco de trabajo de ciberseguridad compuesto por normas y controles para proteger la información de las pymes [Tesis, Universidad Peruana de Ciencias Aplicadas (UPC)]. http://hdl.handle.net/10757/683933
Garibay, A., Muñoz, A. Marco de trabajo de ciberseguridad compuesto por normas y controles para proteger la información de las pymes [Tesis]. PE: Universidad Peruana de Ciencias Aplicadas (UPC); 2024. http://hdl.handle.net/10757/683933
@misc{renati/1300934,
title = "Marco de trabajo de ciberseguridad compuesto por normas y controles para proteger la información de las pymes",
author = "Muñoz Luyo, Angelo Edu",
publisher = "Universidad Peruana de Ciencias Aplicadas (UPC)",
year = "2024"
}
Currently, due to the global pandemic, 51% of Peruvian SMEs have opted for cloud storage. In addition, a study conducted by Microsoft revealed that more than 94% of small and medium-sized enterprises in Peru invested in technology in the last two years. Therefore, SMEs are at risk of cyber-attacks, this has caused SMEs to steadily grow the importance of cybersecurity as a fundamental part of the strategy of SMEs, as 88% of Peruvian SMEs place cybersecurity as a priority, while 78% plan to invest in cybersecurity technologies in their companies. According to the newspaper Gestión (2022) “8 out of 10 SMEs plan to implement data intelligence technology and more than 50% of companies hired staff specialised in data management”. (párr. 7) This paper aims to design and implement a cybersecurity framework to enable SMEs to mitigate their risks from cyber threats (viruses, worms, Trojans, spyware, adware and ransomware). To achieve this goal, international standards and frameworks such as CSF NIST, ISO 27001, ISO 27032, among others, will be used as a reference. For the implementation of the technological model mentioned above, existing methodologies will be evaluated and the most suitable option for the purpose of the project will be selected. Analysis and interpretation of research into cybersecurity frameworks will be critical to the proper development of the controls that SMEs will need to consider in order to mitigate their financial, regulatory and reputational risks.
This item is licensed under a Creative Commons License