Diseño de un Modelo de Negocios para Servicios de Auditoria de Tecnología de la Información y Ciberseguridad

Abstract

Abstract: The business model for Information Technology Auditing and Cybersecurity services aims to offer services that address not only cybersecurity, but also technology auditing in general, highlighting its comprehensive approach to jointly improve efficiency and security. For this purpose, an analysis of the sector that could require the services was considered, as a result of the analysis the selected target group are the savings and credit cooperatives of the country, whose main focus of initiation is the province of Loja, in which the development and implementation of digital services has not yet been exploited due to the lack of resources and strategic vision in this area. Additionally, the lack of robust IT processes and knowledge in risk management means that these types of entities do not risk strategies with a focus on digital services. Part of the research in this work is the analysis of IT and cybersecurity audit companies in the country that provide the services of the proposed model, from which it was determined that in the province of Loja this service still does not stand out, so an opportunity is identified. The value proposition is based on evaluations with a methodology based on risks and key controls that allow the weaknesses that are impacting to be determined in a timely manner, in order to establish action plans that are in line with the interests of financial institutions and their budget. In addition, the model includes an innovative component and a resource-based operational plan, the objectives of which can be measured through performance indicators.