Cybersecurity Maturity Model Against Ransomware Attacks for the Financial Sector

Cobos S.; Garayar A.; Mauricio D. · IEEE Andescon, ANDESCON 2024 - Proceedings (2024) · DOI: 10.1109/andescon61840.2024.10755867

Resumen

Financial microenterprises are essential for a country's economic development; however, they face significant cybersecurity challenges due to the prevalence of ransomware, which accounted for 23% of all security incidents in 2020. This study proposes a Ransomware Attack Mitigation Maturity Model for the financial sector to reduce such attacks. The model consists of 6 maturity levels and 20 established domains, which are weighted and displayed on a results dashboard. The proposed model was validated by expert judgment within the financial and information security sectors. Results show that the model is highly effective in identifying vulnerabilities (93.33%) and recognizing security gaps (83.33%), with a high degree of satisfaction from security personnel (90.00%). This model offers a solid foundation for strengthening cybersecurity and protecting financial microenterprises, thereby contributing to economic development.

Instituciones: Universidad Peruana de Ciencias Aplicadas