Implementación de un firewall para protección basado en el marco de ciberseguridad del NIST en SUB CAFAE se Iquitos, 2024

• Autores: Tello Arcentales, Oswaldo Mauricio, Durand Saavedra, Rod Herickson
• Formato: tesis de grado
• Fecha de Publicación: 2025
• Institución: Universidad Nacional De La Amazonía Peruana
• Repositorio: UNAPIquitos-Institucional
• Lenguaje: español
• OAI Identifier: oai:repositorio.unapiquitos.edu.pe:20.500.12737/12040
• Enlace del recurso: https://hdl.handle.net/20.500.12737/12040
• Nivel de acceso: acceso abierto
• Materia: Seguridad informática; Ciberseguridad; Protección de datos; Normas; https://purl.org/pe-repo/ocde/ford#2.02.03

The present research aimed to determine how the implementation of a firewall based on the NIST Cybersecurity Framework (NIST CSF) improves cybersecurity perception among technology personnel at SUB CAFAE SE Iquitos in 2024. The study employed a quantitative approach with a prospective longitudinal pre experimental design, applied to a sample of 10 collaborators from the IT department. Structured surveys were used for data collection before and after implementation, analyzed with IBM SPSS v27 using Wilcoxon signed-rank tests, evaluating the five NIST CSF functions: identify, protect, detect, respond, and recover. Results showed significant improvements in all evaluated indicators, with a general improvement of 94.1% in cybersecurity perception (Z = -2.803, p = 0.005) and large effect sizes (r = 0.89) across all dimensions. The greatest improvements were recorded in recovery planning (174.2%), response planning (157.4%), data security (103.0%), and anomaly detection (102.7%). It is concluded that the implementation of the NIST CSF-based firewall significantly influences the improvement of cybersecurity perception, confirming all proposed hypotheses. This study represents the first documented empirical application of the NIST CSF framework in an educational financial sector organization in the Peruvian Amazon region, providing practical evidence of the framework's utility in Latin American corporate environments and its effective application in hybrid organizations within the educational sector.