This proposal outlines the establishment of a Computer Security Incident Response Team (CSIRT) at the Central University of Ecuador (UCE) with a focus on training, awareness, and a hybrid model adapted to the academic environment. The study utilizes a mixed qualitative–quantitative approach to analyze international best practices, diagnose cybersecurity vulnerabilities at UCE, and design the proposed model. The findings emphasize the importance of strengthening security culture, reducing incidents caused by human error, and integrating cybersecurity into the university curriculum. The model includes an organizational structure, educational services, and assessment metrics that adhere to standards such as ISO/IEC 27,035 and NIST SP 800–61. This research contributes to the field of CSIRTs in educational institutions with limited resources, providing a replicable framework specifically tailored for Latin American contexts.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Toward a University CSIRT: Analysis of Best Practices and Proposal of a Hybrid Model for Educational Institutions

  • Nelson Salgado-Reyes,
  • Jorge Rivera-Guaman

摘要

This proposal outlines the establishment of a Computer Security Incident Response Team (CSIRT) at the Central University of Ecuador (UCE) with a focus on training, awareness, and a hybrid model adapted to the academic environment. The study utilizes a mixed qualitative–quantitative approach to analyze international best practices, diagnose cybersecurity vulnerabilities at UCE, and design the proposed model. The findings emphasize the importance of strengthening security culture, reducing incidents caused by human error, and integrating cybersecurity into the university curriculum. The model includes an organizational structure, educational services, and assessment metrics that adhere to standards such as ISO/IEC 27,035 and NIST SP 800–61. This research contributes to the field of CSIRTs in educational institutions with limited resources, providing a replicable framework specifically tailored for Latin American contexts.