Maturity Model of Response Protocols to Ransomware Scenarios in the Mining Sector

• Autores: Gomez, Brignith, Vargas, Saul, Mansilla, Juan Pablo
• Formato: artículo
• Fecha de Publicación: 2024
• Institución: Universidad Peruana de Ciencias Aplicadas
• Repositorio: UPC-Institucional
• Lenguaje: inglés
• OAI Identifier: oai:repositorioacademico.upc.edu.pe:10757/676012
• Enlace del recurso: http://hdl.handle.net/10757/676012
• Nivel de acceso: acceso embargado
• Materia: cybersecurity; defense; maturity model; protocol; ransomware

The Maturity Model for Defense Protocols against Ransomware Scenarios in the mining sector is a useful tool to assess an organization’s level of preparedness against ransomware attacks and design effective strategies to mitigate their impacts. This model, based on the NIST methodology and the ISO 27001 AND 27002 Standards, and the experience of cybersecurity experts, consists of five levels of maturity that go from initial adoption to defense optimization. The Initial level focuses on risk awareness and basic preparation. The Managed level focuses on the protection of critical data and systems, while the Defined level, focuses on early detection and response to incidents. The Managed level seeks response automation and collaboration with third parties, while Optimized level, focuses on continuous improvement and innovation. For each level, achieve the characteristics and objectives allow organizations to assess their current position and establish action plans to improve their readiness. Some recommended best practices include ongoing employee training, implementing technical security measures, conducting incident simulations, adopting backup and recovery solutions, and collaborating with cybersecurity service providers. In summary, the Maturity Model for Ransomware Defense Protocols is a valuable tool to help organizations improve their ability to resist and recover from ransomware attacks. Its focus on best practices and continuous improvement makes it a reference in the field of cybersecurity.