Current cybersecurity landscape: threats, legislation, and structural gaps from a systematic review
DOI:
https://doi.org/10.5281/zenodo.15605545Keywords:
digital divide, cybersecurity, institutional maturityAbstract
Cybersecurity in Peru represents a growing strategic challenge, driven by the constant increase in digital attacks, the rapid digitalization of productive sectors, and existing regulatory gaps. In this context, this study examines the current landscape through a systematic review of scientific literature published between 2020 and 2024, based on Scopus and a historical-logical approach. To this end, 24 studies were selected that address aspects such as the most common types of cyberattacks, the level of cybersecurity maturity, current legislation, business investment, technological advances, and the specialized labor market. The findings indicate that the country faces a high volume of attacks, primarily phishing and electronic fraud, which generate growing economic losses and limit response capacity. Furthermore, it was evident that Peru is in an early stage of the Cybersecurity Capability Maturity Model (CMM), with outdated legislation and poor institutional coordination. Although investment in cybersecurity has increased, a critical shortage of specialized talent persists, affecting the effectiveness of digital defense policies. Therefore, it is essential to design a comprehensive national strategy that strengthens the regulatory framework, promotes specialized technical training, and fosters multisectoral cooperation. Only then will it be possible to resiliently confront the complex ecosystem of digital threats affecting the country.
Downloads
References
Aguilar, A. J. M. (2024). Rezago y asimetrías de las política nacional e internacional de ciberseguridad de México frente a Estados Unidos y Canadá: Retos de cooperación para Norteamérica. Revista Académica del CISAN-UNAM, 19(1), 38. https://dialnet.unirioja.es/descarga/articulo/9396821.pdf
Alhumud, T. A. A., Omar, A., & Altohami, W. M. A. (2023). An assessment of cybersecurity performance in the Saudi universities: A Total Quality Management approach. Cogent Education, 10(2), 2265227. https://doi.org/10.1080/2331186X.2023.2265227
Alsharida, R. A., Al-Rimy, B. A. S., Al-Emran, M., & Zainal, A. (2023). A systematic review of multi-prospects on human cybersecurity behavior. Technology in Society, 73, 102258. https://doi.org/10.1016/j.techsoc.2023.102258
Amasifuen, M. G. (2024). La ciberseguridad en el Perú. El Peruano.
BCRP. (2024). Informe anual sobre el impacto económico de los delitos cibernéticos en Perú (p. 58). https://www.bcrp.gob.pe/publicaciones/memoria-anual/memoria-2024.html
Bermúdez, C., & Cano, J. J. (2023). Cybersecurity model for the logistics and land transportation sectors. Infosys, 8. https://esdegrepositorio.edu.co/handle/20.500.14205/11147
Calderón, J. J. (2020). Crece inversión en seguridad tecnológica en empresas peruanas. El Peruano. https://elperuano.pe/noticia/89401-crece-inversion-en-seguridad-tecnologica-en-empresas-peruanas
Cervera, A., & Alyson, G. (2024). Cybersecurity and use of ICT in the health sector. Atención Primaria, 56(3). https://pubmed.ncbi.nlm.nih.gov/38219392/
Chidukwani, A., Zander, S., & Koutsakis, P. (2024). Cybersecurity preparedness of small-to-medium businesses: A Western Australia study with broader implications. Computers & Security, 145, 104026. https://doi.org/10.1016/j.cose.2024.104026
Congreso de la República del Perú (2021). Ley de Protección de Datos Personales peruana. El Peruano. https://www.leyes.congreso.gob.pe/documentos/leyes/29733.pdf
Congreso de la República del Perú (2023). Ley de Delitos Informáticos. El Peruano. https://www2.congreso.gob.pe/sicr/cendocbib/con5_uibd.nsf/C5F98BB564E5CCCF05258316006064AB/$FILE/6_Ley_30096.pdf
Dodge, C. E., Fisk, N., Burruss, G. W., Moule, R. K., & Jaynes, C. M. (2023). What motivates users to adopt cybersecurity practices? A survey experiment assessing protection motivation theory. Criminology & Public Policy, 22(4), 849–868. https://doi.org/10.1111/1745-9133.12641
Dumchikov, M., Maletova, O., Mishchenko, T., & Lytvynenko, Y. (2025). Artificial intelligence in cyberspace: Between danger and innovation. Revista de Direito, Estado e Telecomunicacoes, 17(1), 117–142. https://doi.org/10.26512/lstr.v17i1.53386
Forbes, S. (2024). El Perú sufrió 5.000 millones de intentos de ciberataques en 2023. Forbes Perú. https://forbes.pe/tecnologia/2024-03-25/el-peru-sufrio-5-000-millones-de-intentos-de-ciberataques-en-2023-reporto-fortinet/
Gibbs, T. (2020). Seeking economic cyber security: A Middle Eastern example. Journal of Money Laundering Control, 23(2), 493–507. https://www.emerald.com/insight/content/doi/10.1108/jmlc-09-2019-0076/full/html
Gomez, A. (2023). Ciberseguridad: Empresas pueden perder desde US$ 13 mil hasta más de US$ 5 millones por ataque. El Peruano. https://elcomercio.pe/tecnologia/ciberseguridad/ciberseguridad-empresas-pueden-perder-desde-us-13-mil-hasta-mas-de-us-5-millones-por-ataque-ciberdelincuencia-malware-phishing-suplantacion-de-identidad-noticia/
Houichi, M., Jaidi, F., & Bouhoula, A. (2024). A comprehensive and in-depth study of the threats faced by smart cities and the countermeasures implemented in their key areas. Journal of Infrastructure, Policy and Development, 8(10), 8629. https://systems.enpress-publisher.com/index.php/jipd/article/view/8629
ICEX España Exportación e Inversiones. (2023). Ficha sector: Ciberseguridad en Perú 2023. https://www.icex.es/es/quienes-somos/donde-estamos/red-exterior-de-comercio/PE/documentos-y-estadisticas/estudios-e-informes/visor-de-documentos.ficha-sector--ciberseguridad-en-per%C3%BA-2023.doc065202312
Koolen, C., Wuyts, K., Joosen, W., & Valcke, P. (2024). From insight to compliance: Appropriate technical and organisational security measures through the lens of cybersecurity maturity models. Computer Law & Security Review, 52, 105914. https://doi.org/10.1016/j.clsr.2023.105914
Lukáč, J., Kudlová, Z., Kopčáková, J., & Gallo, P. (2025). Impact of socio-economic factors on digital literacy and security. TEM Journal, 14(1), 925–932. https://www.temjournal.com/content/141/TEMJournalFebruary2025_925_932.pdf
Mahyoub, M., Matrawy, A., Isleem, K., & Ibitoye, O. (2025). Cybersecurity challenge analysis of work-from-anywhere (WFA) and recommendations guided by a user study. IEEE Transactions on Human-Machine Systems. https://arxiv.org/abs/2409.07567
Martín, M. V. (2023). Ciberseguridad en Perú. (O. E. Comercial, Ed.). ICEX, 8.
Mat, B., Pero, S. D. M., Zengeni, K. T., & Fakhrorazi, A. (2022). Towards an understanding of emerging cybersecurity challenges of a small state: A case study of Malaysia. Tamkang Journal of International Affairs, 25(3), 45–108. https://doi.org/10.6185/TJIA.V.202201_25(3).0002
Nastjuk, I., Rampold, F., Trang, S., & Benitez, J. (2024). A field experiment on ISP training designs for enhancing employee information security compliance. European Journal of Information Systems. https://doi.org/10.1080/0960085X.2024.2359460
OEA (2023). Fuerza laboral de ciberseguridad. Programa de Ciberseguridad del Comité Interamericano contra el Terrorismo. Organización de los Estados Americanos. https://www.oas.org/es/sms/cicte/docs/Reporte_sobre_el_desarrollo_de_la_fuerza_laboral_de_ciberseguridad_en_una_era_de_escasez_de_talento_y_habilidades.pdf
Optiv Security (2019). Empresas atrapadas en un ciclo de respuesta de ciberseguridad continuamente reactivo. El Economista. https://www.eleconomista.es/empresas-finanzas/noticias/9731425/02/19/Empresas-atrapadas-en-un-ciclo-de-respuesta-de-ciberseguridad-continuamente-reactivo-segun-un-informe-de-Optiv-Security.html
Orosco-Fabian, J. R. (2024). Cybersecurity in higher education: A bibliometric review. Revista Digital de Investigación en Docencia Universitaria, 18(2), e1933. http://www.scielo.org.pe/pdf/ridu/v18n2/2223-2516-ridu-18-02-e1933.pdf
Pravdiuk, A. (2022). The state and current issues of legal regulation of cyber security in Ukraine. Evropsky Politicky a Pravni Diskurz, 9(3), 19–28. http://repository.vsau.org/card.php?lang=en&id=31305
Presidencia del Consejo de Ministros (2017). Política Nacional de Ciberseguridad. Diario El Peruano. https://www2.congreso.gob.pe/sicr/cendocbib/con5_uibd.nsf/A36311FB344A1DC7052583160057706D/$FILE/Pol%C3%ADtica_Nacional_de_Ciberseguridad_peru.pdf
ProInnóvate (2024). Los perfiles profesionales tecnológicos más demandados en el Perú. Ministerio de la Producción. https://www.gob.pe/institucion/proinnovate/noticias/913473-los-perfiles-profesionales-tecnologicos-mas-demandados-en-el-peru-desarrolladores-ia-y-ciberseguridad-lideran-la-lista
Rawindaran, N., Jayal, A., Prakash, E., & Hewage, C. (2023). Perspective of small and medium enterprise (SMEs) and their relationship with government in overcoming cybersecurity challenges and barriers in Wales. International Journal of Information Management Data Insights, 3(2), 100191. https://doi.org/10.1016/j.jjimei.2023.100191
Reyes, E. (2023). Técnicas de aprendizaje automático para la detección y prevención de amenazas de ciberseguridad. Proyecciones futuras. Revista Cubana de Ciencias Informáticas, 17, 15–27. https://rcci.uci.cu/index.php/RCCI
Ricci, S., Parker, S., Jerabek, J., Lendak, I., & Janout, V. (2024). Understanding cybersecurity education gaps in Europe. IEEE Transactions on Education, 67(2), 190–201. https://ieeexplore.ieee.org/document/10380620
Sánchez, F. M. (2022). La seguridad en el ciberespacio desde una perspectiva sociocultural. Revista de Ciencias Sociales, 2, 243–258.
Serini, F. (2024). Collective cyber situational awareness in EU. A political project of difficult legal realisation? Computer Law & Security Review, 55, 106055. https://doi.org/10.1016/j.clsr.2024.106055
Smikle, L. (2023). The impact of cybersecurity on the financial sector in Jamaica. Journal of Financial Crime, 30(1), 86–96. https://ideas.repec.org/a/eme/jfcpps/jfc-12-2021-0259.html
Song, J., & Park, M. J. (2024). A system dynamics approach for cost-benefit simulation in designing policies to enhance the cybersecurity resilience of small and medium-sized enterprises. Information Development. https://doi.org/10.1177/02666669241252996
Tapia, E., & Canizales, R. (2021). La importancia de la ciberseguridad y los derechos. Misión Jurídica, 14(20), 142–158. https://www.revistamisionjuridica.com/wp-content/uploads/2021/06/08-20-La-importancia-de-la-ciberseguridad-y-los-derechos-humanos-en-el-entorno-virtual.pdf
Tok, Y. C., & Chattopadhyay, S. (2023). Identifying threats, cybercrime and digital forensic opportunities in smart city infrastructure via threat modeling. Forensic Science International: Digital Investigation, 45, 301540. https://doi.org/10.1016/j.fsidi.2023.301540
Towhidi, G. P. J. (2023). Aligning cybersecurity in higher education with industry. Journal of Information Systems Education, 34(1), 70–83. https://jise.org/Volume34/n1/JISE2023v34n1pp70-83.pdf
Wong, L.-W., Lee, V.-H., Tan, G. W.-H., Ooi, K.-B., & Sohal, A. (2022). The role of cybersecurity and policy awareness in shifting employee compliance attitudes: Building supply chain capabilities. International Journal of Information Management, 66, 102520. https://doi.org/10.1016/j.ijinfomgt.2022.102520
Zanke, A., Weber, T., Dornheim, P., & Engel, M. (2024). Assessing information security culture: A mixed-methods approach to navigating challenges in international corporate IT departments. Computers & Security, 144, 103938. https://doi.org/10.1016/j.cose.2024.103938
Zhang, Y., Frank, R., Warkentin, N., & Zakimi, N. (2022). Accessible from the open web: A qualitative analysis of the available open-source information involving cyber security and critical infrastructure. Journal of Cybersecurity, 8(1), tyac003. https://doi.org/10.1093/cybsec/tyac003
Published
Issue
Section
License
This work is licensed under a Creative Commons Attribution 4.0 International License.
The journal is licensed under the Attribution License (CC BY), allowing the possibility of copying, distributing, displaying, and producing derivative works, as long as the author is acknowledged and cited.
