Bibliographic citations
Bazalar, G., Esteban, C., Rodriguez, J. (2022). Modelo de madurez para determinar el nivel de cultura de ciberseguridad en organizaciones industriales [Trabajo de investigación, Universidad Peruana de Ciencias Aplicadas (UPC)]. http://hdl.handle.net/10757/669347
Bazalar, G., Esteban, C., Rodriguez, J. Modelo de madurez para determinar el nivel de cultura de ciberseguridad en organizaciones industriales [Trabajo de investigación]. PE: Universidad Peruana de Ciencias Aplicadas (UPC); 2022. http://hdl.handle.net/10757/669347
@mastersthesis{renati/408294,
title = "Modelo de madurez para determinar el nivel de cultura de ciberseguridad en organizaciones industriales",
author = "Rodriguez Neyra, Jilver Pepe",
publisher = "Universidad Peruana de Ciencias Aplicadas (UPC)",
year = "2022"
}
In the last five years, cybersecurity incidents have increased in frequency by 40 percent in the industry as a whole. Eighty percent of companies believe that there is no cybersecurity culture implemented in their respective company and only 11 percent have methods and programs for continuous measurement of this culture. In this research paper we have delved into the behavior of the human factor as the main threat to cybersecurity. Taking into account the industrial context, the economic, social and political reality of the country, we decided to present an alternative that allows monitoring the state of the culture in a continuous, easy to use and low-cost way. Based on this need, we propose a Maturity Model to determine the level of cybersecurity culture in industrial organizations that allows to evaluate the state of the culture in the company through its components and monitor them through metrics defined in this project. The model will allow us to show results, easy to understand, that will allow us to support projects and improvement programs in culture awareness. Finally, the measurement tool was applied to a company in the mining sector operating throughout the country. The questionnaires were deployed to be solved by information technology and business specialists. The results obtained show us the current state of the company's cybersecurity culture and the controls that must be adjusted in order to achieve the objective level set, where a change in the behavior of the organization's employees can be seen, which will strengthen their cybersecurity capabilities.
This item is licensed under a Creative Commons License