Gestión de riesgos en proyectos de ciberseguridad

Abstract

Risk management in cybersecurity projects has become a critical factor for organizational success in the face of the growing number of digital threats. This article aims to analyze the benefits of integrated risk management in cybersecurity projects and its impact on meeting objectives, costs, and deadlines. The identified problem lies in the low adoption of formal risk management practices in project planning, which leads to high failure rates. A qualitative approach with a descriptive scope was employed, based on a documentary review of technical 4 standards (ISO 31000, ISO 27005), government reports, and recent studies from the Project Management Institute and the FBI. The main findings indicate that only 30% of organizations apply risk management in planning, and 68% have experienced cybersecurity incidents. It is concluded that proper risk management improves planning, optimizes resources, strengthens decision-making, and increases stakeholder confidence, making it essential for the success of cybersecurity projects