Construcción e implementación de un modelo para diagnosticar el nivel de la ciberseguridad en una micro-red. Caso de Estudio: micro-red de la Universidad de Cuenca

Abstract

A cyberattack on a critical infrastructure can cause a crash or interruption in its operation. The direct consequences in the environment where the impact occurs are very high, causing serious

economic losses, in addition to endangering human lives or affecting the environment. A micro- grid is within this type of structure, so a cybersecurity maturity model is important for them. In the

present work, the construction of a cybersecurity maturity model was made, which allows measuring the level of cybersecurity maturity in a micro-grid, this model is based on the series ISO 27000, NIST 800 and the C2M2 model. The model is made up of ten domains, which have a series of attributes with different assigned scores, and four levels of maturity indicators NIM, which

have a range of scores and color indicators to establish the level of maturity in which is a micro- grid. A web application was developed, which allows the evaluation of cybersecurity using the model created through a questionnaire, allowing to establish and show the level of maturity in which a micro-grid according to the results. As a case study, the evaluation of the microgrid of the University of Cuenca was carried out. The results obtained are detailed, and based on them, recommendations were made to increase the level of maturity of the same.