Software Adaptativo para la Evaluación del Nivel de Madurez en Ciberseguridad Empresarial

Abstract

Technological advancements over the past decade driven by Industry 4.0 technologies have prompted companies to adopt digital transformation processes to enhance their competitiveness; the outcome of these processes is measured by the company's level of digital maturity. Today, most companies utilize various sales and collection channels, operate via intranets and extranets, and employ multiple payment and collection gateways accessible to different intranet users. This necessitates diverse cybersecurity measures to protect both information and financial operations, making IT security increasingly essential in the business world. In the province of Tungurahua, Ecuador, there are many small and medium-sized enterprises that have not prioritized cybersecurity and, consequently, have invested little to nothing in it; this is the issue under analysis. A sample of 38 companies was studied to assess whether they truly recognize the current importance of cybersecurity. The vast majority respond that they do not yet consider it necessary to invest in cybersecurity, though they do plan to do so in the future. The research concludes that there is a very low bordering on non-existent level of cybersecurity and IT disaster prevention culture among small and medium-sized enterprises. The software is based on ISO 27002 and automatically assesses the organization's cybersecurity maturity level.