Cybersecurity Capability Maturity Model for the Ecuadorian State

This project addresses the lack of a structured framework for evaluating cybersecurity within the Ecuadorian State. Given the absence of a National Cybersecurity Strategy and a comprehensive diagnosis of critical assets, the research proposes a maturity model based on international standards such as NIST CSF, CMM, and C2M2, adapted to the socioeconomic realities of developing countries. The methodology employs a mixed approach, combining a multivocal literature review with a descriptive method for diagnosing national critical infrastructure. The deductive method will be used for the model's design, and expert judgment validation will ensure its applicability. Expected results include a validated tool that allows public and private institutions to measure their cybersecurity capability, identify risks, and improve incident response. This model seeks to close security gaps, foster a culture of cybersecurity, and serve as a reference for other countries in similar situations, thereby contributing to digital sovereignty and the protection of essential basic services for society.<br/><br/><b>Goal</b>: <br/>Develop a Cybersecurity Capability Maturity Model adapted for the Ecuadorian State, considering its context as a developing country. The goal is to establish a baseline to diagnose vulnerabilities and strengthen the protection of critical infrastructure.<br/><br/><b>Research lines</b>: <br/>Industry 4.0