Modelo de integración de la arquitectura de seguridad empresarial O-ESA con Implementación de controles CIS

Abstract

Organizational cybersecurity faces constant challenges due to the evolving nature of digital threats. In response, this project proposes strengthening the Open Enterprise Security Architecture (O-ESA) through its integration with the Center for Internet Security (CIS) Controls, which provide prioritized measures based on maturity levels. Through documentary analysis, theoretical mapping between O-ESA and CIS Controls, and cyber threat simulations, it was demonstrated that this integration enhances risk mitigation effectiveness by offering a more precise and adaptable framework for implementing security controls. The developed model not only facilitates the structured adoption of O-ESA but also optimizes its application by aligning its components with the CIS Controls, thereby strengthening the organization's security posture against emerging threats.