Modelo de gestión del cambio de la cultura de la seguridad de la información

Abstract

Abstract:One of the basic needs in organizations is the care and protection of their information, which is why efforts are oriented to implement controls at the level of processes, people and technologies. This is why information security becomes a challenge in organizations, where depending on their size, they have a limited budget to implement technological controls that help prevent the most sophisticated cyber attacks. Although these controls are effective, they can also be very costly, which is why we are promoting the strengthening of one of the edges of the company's cyber-defense strategy, which considers people to be the weakest link. Having people trained to identify cyber threats and maintaining a management framework based on good practices supports the prevention strategy. As the level of exposure of organizations decreases, their maturity with respect to information security awareness increases, improving the behavior and level of reaction of people to respond early to cyber attacks, thus preventing them from materializing and generating economic or reputational losses to the organization.