Bibliographic citations
Gómez, L., Chavez, R., Huamaní, C. (2024). Modelo para determinar el nivel de madurez del programa de ciberseguridad de las entidades financieras peruanas [Trabajo de investigación, Universidad Peruana de Ciencias Aplicadas (UPC)]. http://hdl.handle.net/10757/673741
Gómez, L., Chavez, R., Huamaní, C. Modelo para determinar el nivel de madurez del programa de ciberseguridad de las entidades financieras peruanas [Trabajo de investigación]. PE: Universidad Peruana de Ciencias Aplicadas (UPC); 2024. http://hdl.handle.net/10757/673741
@misc{sunedu/3667082,
title = "Modelo para determinar el nivel de madurez del programa de ciberseguridad de las entidades financieras peruanas",
author = "Huamaní Buiza, Carlos Sergio",
publisher = "Universidad Peruana de Ciencias Aplicadas (UPC)",
year = "2024"
}
Currently, private entities in each country face the urgent need to protect their computer systems against cyber-attacks. This increase was intensified during the Covid-19 pandemic in 2020, prompting organizations to adopt the telecommuting modality. Financial organizations were the ones that invested the most in cybersecurity issues, acquiring new and better technologies to allow them to work normally because they conduct banking transactions worldwide, every day of every month of the year. In response to this growing threat, the Peruvian regulatory entity, the Society of Banks, Insurance Companies, and AFPs (SBS), has approved a new regulation for information security and cybersecurity management, which establishes a framework for information security management system. This research project proposes a model that allows identifying the level of maturity of the cybersecurity program in a financial institution and formulating recommendations aligned with the regulatory standards of the regulatory entity. To do this, the theoretical basis to be applied embraces the NIST framework, which contains a set of practices, procedures, and activities to help organizations understand their cybersecurity risks more deeply, manage, and mitigate their risks against cyber threats. This model was validated in a transnational Peruvian financial institution through the application of an evaluation tool. This evaluation allowed determining the current maturity level of the entity. The results obtained served as a basis for formulating specific recommendations for them to reach the desired level of maturity by the entity itself. Putting greater emphasis on a systematic and pragmatic, non-dogmatic approach to establishing an efficient and sustainable framework, where a cost-benefit convenience criterion prevails. This perspective is presented as a solution aligned with regulatory requirements.
This item is licensed under a Creative Commons License