Estrategia de resiliencia digital basada en el NISF RMF: fortalecimiento de la ciberseguridad en el Instituto Hondureño de Transporte Terrestre (IHTT) como modelo para instituciones gubernamentales de Honduras
Loading...
Date
2025-05-08
Journal Title
Journal ISSN
Volume Title
Publisher
Universidad Tecnológica Centroamericana UNITEC
Abstract
El Instituto Hondureño de Transporte Terrestre (IHTT) enfrenta un problema crítico de ciberseguridad debido a una infraestructura tecnológica inadecuada y falta de capacitación en seguridad informática. El estudio buscó desarrollar una estrategia integral de ciberseguridad basada en el NIST Risk Management Framework (RMF) 2021, con el objetivo de reforzar la infraestructura de TI y asegurar la continuidad operativa ante amenazas cibernéticas. Se emplearon metodologías de gestión de riesgos y auditoría de seguridad, con un enfoque mixto y una población compuesta por técnicos de TI, abogados, operadores de ventanilla, inspectores de campo y otros empleados. Las encuestas y entrevistas revelaron deficiencias significativas, con un 60% de técnicos y un 70% de otros empleados considerando insuficientes las herramientas de seguridad actuales. La propuesta final incluye la actualización de la infraestructura tecnológica, la implementación de políticas de seguridad robustas y un programa continuo de capacitación en ciberseguridad, todo ello alineado con los principios y directrices del NIST RMF. Palabras claves: (Ciberseguridad, Estrategia, Infraestructura, Políticas, Capacitación)
The Honduran Institute of Land Transportation (IHTT) faces a critical cybersecurity problem due to inadequate technological infrastructure and a lack of training in information security. The study aimed to develop a comprehensive cybersecurity strategy based on the NIST Risk Management Framework (RMF) 2021, with the objective of reinforcing the IT infrastructure and ensuring operational continuity against cyber threats. Risk management and security Audit methodologies were employed, using a mixed approach and a population composed of IT technicians, lawyers, window operators, field inspectors, and other employees. Surveys and interviews revealed significant deficiencies, with 60% of technicians and 70% of other employees considering the current security tools insufficient. The final proposal includes updating the technological infrastructure, implementing robust security policies, and establishing a continuous cybersecurity training program, all aligned with the principles and guidelines of the NIST RMF. Keywords: (Cybersecurity, Strategy, Infrastructure, Policies, Training)
The Honduran Institute of Land Transportation (IHTT) faces a critical cybersecurity problem due to inadequate technological infrastructure and a lack of training in information security. The study aimed to develop a comprehensive cybersecurity strategy based on the NIST Risk Management Framework (RMF) 2021, with the objective of reinforcing the IT infrastructure and ensuring operational continuity against cyber threats. Risk management and security Audit methodologies were employed, using a mixed approach and a population composed of IT technicians, lawyers, window operators, field inspectors, and other employees. Surveys and interviews revealed significant deficiencies, with 60% of technicians and 70% of other employees considering the current security tools insufficient. The final proposal includes updating the technological infrastructure, implementing robust security policies, and establishing a continuous cybersecurity training program, all aligned with the principles and guidelines of the NIST RMF. Keywords: (Cybersecurity, Strategy, Infrastructure, Policies, Training)
Keywords
Ciberseguridad, Estrategia, Infraestructura