Cybersecurity in Public Institutions in Chimborazo: A Situational Assessment

Abstract

This article presents a situational diagnosis of cybersecurity in public institutions of the Chimborazo province, Ecuador. The core issue lies in the insufficient institutional readiness to face growing cyber threats, especially in a context where governmental systems handle critical and sensitive information. The significance of this problem is evidenced by the steady increase in cyberattacks across Latin America, with public entities being among the most vulnerable. Previous studies have identified normative fragmentation, limited budget allocation, and lack of technical training as key structural weaknesses. In response, this article proposes a mixed-method study based on a systematic literature review, regulatory analysis, and a local case study supported by survey data. Comparative statistics between Ecuadorian provinces and a projected cybersecurity maturity model for Chimborazo (2025–2030) are presented. The findings show that only 35% of local institutions have implemented cybersecurity policies and that basic practices such as regular password changes are not yet widespread. The study concludes that coordinated strategies aligned with international standards such as ISO/IEC 27001 and the NIST framework are urgently needed, alongside the creation of a provincial CSIRT to strengthen the digital resilience of public services.