An Approach to Information Security Based on the Legal Basis for an Organization in Ecuador

Abstract

Information security issues persist at both technical and legal levels, among others. One of the main causes in Ecuador is the lack of an adequate legal framework for the field of information and communication technologies. The objective of this research is to conduct an analysis of information security considering the legal framework for information technologies for an organization. The deductive method and exploratory research were used to review the information and official websites. The results obtained in this research are Indicators related to the legal basis and information security, statistical analysis of the National Cyber Security Index (NCSI), Relevant actors to globalize information security and cybersecurity based on the legal basis, Prototype supported by relevant actors and Simulation for the globalization of information security and cybersecurity. It was concluded that the statistical analysis of the National Cyber Security Index (NCSI) resulted in a score of 53.25% for Ecuador, according to the 2023 report on information security and cybersecurity. This score can be improved to 83.33% based on the results obtained from the simulation conducted in five different scenarios for the globalization of information security and cybersecurity