Multi-criteria analysis of cybersecurity maturity in the largest Latin American economies using CRITIC-WISP

Purpose This study aims to introduce a multi-criteria model to assess cybersecurity maturity in Latin America’s ten largest economies, addressing the limitations of traditional indices. By integrating the Global Cybersecurity Index pillars with socioeconomic indicators such as gross domestic product (GDP) and internet penetration, the model provides a more contextualized analysis. Design/methodology/approach Using the CRiteria Importance Through Intercriteria Correlation-Weighted Integrated Sum-Product method, the research objectively weighs the evaluation criteria, identifying GDP (C7), organizational measures (C3) and internet usage (C6) as the most significant factors in differentiating maturity levels. Findings The results rank Brazil and Mexico as leaders but also highlight Ecuador’s strong institutional performance, which ranks third despite its smaller economy. The model reveals important insights, such as Argentina’s underperformance relative to its economic size, pointing to gaps in specific capacities. Research limitations/implications This study only assessed the ten largest economies in the region. In addition, a limited number of criteria were used for scope limitation. Practical implications The results of this study offer a valuable diagnostic tool for policymakers, highlighting the necessity of including more dimensions in cybersecurity maturity analysis. Social implications The findings suggest that uneven cybersecurity maturity can amplify social vulnerabilities, influencing citizens’ exposure to cybercrime and their safe access to essential digital services in emerging economies. Originality/value This approach offers a robust diagnostic tool for policymakers to develop targeted strategies and enhance regional digital resilience.