Desarrollo de una herramienta inteligente para evaluar un SGSI pymes del sector aduanero en Guayaquil

Abstract

CONDITION FOR PUBLICATION OF PROJECT. Small and medium enterprises (SMEs) in Ecuador's customs sector face critical challenges in evaluating compliance with their Information Security Management Systems (ISMS) due to the interpretative complexity of specialized regulations, limited economic resources, and lack of specialized technical personnel to prepare for mandatory external audits. This situation generates operational vulnerabilities and regulatory sanction risks that compromise business continuity. The objective of this project is to develop an intelligent audit chatbot that facilitates self-assessment of regulatory compliance, improves accuracy in detecting non-conformities, and significantly reduces time and costs associated with audits. A high-fidelity prototype was developed using AI techniques, advanced conversational engine, and adaptive forms with conditional logic. The platform integrated a database with over 150 regulatory criteria from LOPDP, COBIT 2019, and BASC standards. Validation was conducted through controlled scenarios and real business situations with expert feedback. Results showed a 45% reduction in audit times, 90% accuracy in detecting non-conformities, and substantial strengthening of business confidence in facing external audits. The bot transforms regulatory compliance into an accessible and efficient process, enriching the organizational culture of risk management in customs SMEs. Keywords: chatbot, ISMS, AI, LOPDP, automation.