El fenómeno de la interconectividad y la ciberseguridad: una introducción al objetodel derecho de la ciberseguridad

Rodolfo Núñez Robinson

doi:10.22490/26655489.8268

Vol. 7 No. 13 (2025): Enero - Junio

Published 2025-01-11

license

Artículos de reflexión

The Interconnectivity Phenomena and Cybersecurity

DOI: https://doi.org/10.22490/26655489.8268

Rodolfo Núñez Robinson Pontificia Universidad Católica del Perú

PDF (Spanish)

Abstract
References

There is no doubt that the interconnectivity phenomenon is extremely useful: it allows us to achieve our objectives and access information immediately. However, we are poorly aware of the high cost it entails, due to the breaches and vulnerabilities generated by the exponential growth of digital technologies and their development, which increasingly broadens the catalogue of assets susceptible to cyber-attacks. Interconnectivity is an unstoppable reality, making it essential to learn how to manage cyber risks from a technical perspective and with an interdisciplinary approach that allows us to understand the object of study of Cybersecurity Law. With this purpose in mind, this paper will explain cyber risks and threats, as well as the international evolution of this emerging branch of law, in terms of international, communitarian, technical and standardisation norms. Subsequently, the term cybersecurity will be addressed from different legal perspectives in the leading countries in the field, and the principles and commercial uses that must be complied with when analysing it legally (lex artis) will be established, which will serve as a control parameter when examining this type of case.

keywords: cybercrimes, cybersecurity, cyber threats, cyber risks, risk management

Committee on National Security Systems. (2022). CNSSI 4009. Committee on National Security Systems. https://tinyurl.com/bdzmny3v

Committee on National Security Systems. (2015). Committee on National Security Systems (CNSS) Glossary - CNSSI No. 4009. Committee on National Security Systems.

Congreso de Los Estados Unidos de América. (2002). Cyber Security Research and Development Act. Congreso de los Estados Unidos de América. https://tinyurl.com/yck6mua6

Congreso de Los Estados Unidos de América. (2014). Federal Information Security Modernization Act. Public Law 113-282. https://tinyurl.com/84my2m7v

Consejo Europeo. (2001, 23 de noviembre). Convenio sobre la ciberdelincuencia. Consejo Europeo. https://tinyurl.com/bdxu2tyk

Consejo Europeo. (2024, 8 de febrero). Consejo Europeo. https://tinyurl.com/6x846c9f

CrowdStrike. (2024). EXECUTIVE SUMMARY: CrowdStrike Preliminary Post Incident Review (PIR): Content Configuration Update Impacting. CrowdStrike.

Cybersecurity & Infrastructure Security Agency. (2021, 1 de febrero). What is cybersecurity? https://tinyurl.com/yck76dzx

European Union Agency for Network and Information Security. (2015). Definition of cybersecurity- Gaps and overlaps in standardisation. European Union Agency for Network and Information Security.

Falco, G. y Rosenbach, E. (2022). Confronting cyber risk: An embedded endurance strategy for cybersecurity. Oxford University Press.

Gelsi, S. (2024, 31 de julio). MarketWatch. https://tinyurl.com/575ckp73

International Organization for Standardization (ISO) & International Electrotechnical Commission (IEC). (2023). ISO/IEC 27032:2023: Cybersecurity — Guidelines for Internet security. International Organization for Standardization (ISO) & International Electrotechnical Commission (IEC).

International Telecommunication Union. (2008). SERIES X: DATA NETWORKS, OPEN SYSTEM - Recommendation ITU-T X.1205 (Overview of Cybersecurity). International Telecommunication Union.

La Casa Blanca de los Estados Unidos de América. (2008). Homeland Security Presidential Directive/HSPD-23. Cybersecurity Policy. La Casa Blanca de los Estados Unidos de América.

La Casa Blanca de los Estados Unidos de América. (2008). National Security Presidential Directive/NSPD-54. Cybersecurity Policy. La Casa Blanca de los Estados Unidos de América.

Magee, T. (2024, 24 de julio). Raconteur. https://tinyurl.com/2t9meenb

National Institute of Standards and Technology. (2011). NIST SP 800-29. National Institute of Standards and Technology. https://tinyurl.com/9d969e34

National Institute of Standards and Technology. (2012). NIST SP 800-30. National Institute of Standards and Technology. https://tinyurl.com/3c5h5c8r

National Institute of Standards and Technology. (2015). NIST IT 8074 Vol. 2. National Institute of Standards and Technology. https://tinyurl.com/4rmwb5nt

National Institute of Standards and Technology. (2016). NIST IR 7621 Rev. 1. National Institute of Standards and Technology. https://tinyurl.com/bdfdp3z2

National Institute of Standards and Technology. (2018). NIST Cybersecurity Framework V.1.1. National Institute of Standards and Technology. https://tinyurl.com/59ncac9x

National Institute of Standards and Technology. (2018). NIST SP 800-37 Rev. 2. National Institute of Standards and Technology. https://tinyurl.com/365jbd6t

National Institute of Standards and Technology. (2019a). NIST IT 8183. National Institute of Standards and Technology. https://csrc.nist.gov/pubs/ir/8183/upd1/final

National Institute of Standards and Technology. (2019b). NIST IR 8183A Vol. 1. National Institute of Standards and Technology. https://csrc.nist.gov/pubs/ir/8183/a/v1/final

National Institute of Standards and Technology. (2019c). NIST IT 8183A Vol. 2. National Institute of Standards and Technology. https://tinyurl.com/yc52kd63

National Institute of Standards and Technology. (2019d). NIST IT 8183A Vol. 3. National Institute of Standards and Technology. https://csrc.nist.gov/pubs/ir/8183/a/v3/final

National Institute of Standards and Technology. (2019e). NIST SP 800-160 Vol. 2, Rev. 1. National Institute of Standards and Technology. https://csrc.nist.gov/pubs/sp/800/160/v2/r1/final

National Institute of Standards and Technology. (2022). Ransomware: Small Business Cybersecurity Corner. https://tinyurl.com/4re4r9sn

National Institute of Standards and Technology. (2020a). NIST SP 1800-25B. National Institute of Standards and Technology. https://tinyurl.com/33hd2byu

National Institute of Standards and Technology. (2020b). NIST SP 1800-26B. National Institute of Standards and Technology. https://tinyurl.com/4b4hamv5

National Institute of Standards and Technology. (2022a). NIST IR 8401. National Institute of Standards and Technology. https://csrc.nist.gov/pubs/ir/8401/final

National Institute of Standards and Technology. (2022b). NIST SP 1800-10B. National Institute of Standards and Technology. https://tinyurl.com/mrtpke7k

National Institute of Standards and Technology. (2023). NIST IR 8323r1. National

National Institute of Standards and Technology. (2024). Protecting controlled unclassified information in nonfederal systems and organizations. Departamento de Comercio de los Estados Unidos de América. https://csrc.nist.gov/pubs/ir/8323/r1/final

Parlamento y Consejo Europeo. (2019). Regulación (UE) 2019/881 relativo a ENISA (Agencia de la Unión Europea para la Ciberseguridad) y a la certificación de la ciberseguridad de las tecnologías de la información y la comunicación y por el que se deroga el Reglamento (UE) n.° 526/2013. Parlamento y Consejo Europeo.

Parlamento y Consejo Europeo. (2022). Directiva (UE) 2022/2555 relativa a las medidas destinadas a garantizar un elevado nivel común de ciberseguridad en toda la Unión, por la que se modifican el Reglamento (UE) n.° 910/2014 y la Directiva (UE) 2018/1972. Parlamento y Consejo Europeo.

United States Government Accountability Office. (2018). Weapon systems cybersecurity.

United States Government Accountability Office.

Bibliografía consultada

BornCity. (2024, 28 de julio). BornCity. https://tinyurl.com/55tjyejd

Brooks, R. (2023, 17 de marzo). The CIA Triangle and Its Real-World Application. Netwrix. https://tinyurl.com/42azcjh8

Douglas, H. y Richard, S. (2016). How to measure anything in cybersecurity risk. Wiley.

Núñez Robinson, R. (2024, 21 de junio). Los delitos cibernéticos (cibercrímenes) en el Perú: El tipo de modalidad delictiva más relevante en el Perú y el mundo. Ius 360. https://tinyurl.com/7ev2sfcy

Ralston, W. (2020, 11 de noviembre). The untold story of a cyberattack, a hospital and a dying woman. WIRED. https://tinyurl.com/5xxjc89p

Srinivasan, S. y Ni, L. K. (2023). Ransomware attack at Springhill Medical Center. Harvard Business Review.

license

How to Cite

Núñez Robinson, R. (2025). The Interconnectivity Phenomena and Cybersecurity: an introduction to the object of study of Cybersecurity Law. Análisis Jurídico Político, 7(13), 15-43. https://doi.org/10.22490/26655489.8268

Download Citation

Almétricas

Metrics

Archivos descargados

113