pág. 10463
CYBERSECURITY IN THE ERA
OF E-COMMERCE: BASED ON ISO 27001
STANDARD
CIBERSEGURIDAD EN LA ERA DEL COMERCIO
ELECTRÓNICO: BASADA EN LA NORMA ISO 27001
Gerardo Andrés Serrano Manzano
Universidad Autónoma del Estado de Hidalgo, México
Mónica García Munguía
Universidad Autónoma del Estado de Hidalgo, México
pág. 10464
DOI: https://doi.org/10.37811/cl_rcm.v10i2.24018
Cybersecurity in the Era of E-Commerce: Based on ISO 27001 Standard
Gerardo Andrés Serrano Manzano1
se465780@uaeh.edu.mx
Universidad Autónoma del Estado de Hidalgo
México
Mónica García Munguía
monicagm@uaeh.edu.mx
Universidad Autónoma del Estado de Hidalgo
México
ABSTRACT
This article examines the relevance of the ISO/IEC 27001 standard as a strategic framework for
mitigating cybersecurity risks in e-commerce, with particular emphasis on the Mexican context. It
addresses the principal types of cyberattacks targeting these platforms and proposes the implementation
of an Information Security Management System (ISMS) as an effective solution to safeguard
information, ensure operational continuity, and reinforce consumer trust.
Keywords: cybersecurity, e-commerce, ISO 27001, ISMS, Mexico
1 Autor principal
Correspondencia: se465780@uaeh.edu.mx
DOI: https://doi.org/10.37811/cl_rcm.v10i2.24018
Cybersecurity in the Era of E-Commerce: Based on ISO 27001 Standard
Gerardo Andrés Serrano Manzano1
se465780@uaeh.edu.mx
Universidad Autónoma del Estado de Hidalgo
México
Mónica García Munguía
monicagm@uaeh.edu.mx
Universidad Autónoma del Estado de Hidalgo
México
ABSTRACT
This article examines the relevance of the ISO/IEC 27001 standard as a strategic framework for
mitigating cybersecurity risks in e-commerce, with particular emphasis on the Mexican context. It
addresses the principal types of cyberattacks targeting these platforms and proposes the implementation
of an Information Security Management System (ISMS) as an effective solution to safeguard
information, ensure operational continuity, and reinforce consumer trust.
Keywords: cybersecurity, e-commerce, ISO 27001, ISMS, Mexico
1 Autor principal
Correspondencia: se465780@uaeh.edu.mx
pág. 10465
Ciberseguridad en la era del Comercio Electrónico: Basada en la Norma
ISO 27001
RESUMEN
Este artículo examina la relevancia de la norma ISO/IEC 27001 como marco estratégico para mitigar
los riesgos de ciberseguridad en el comercio electrónico, con especial énfasis en el contexto mexicano.
Aborda los principales tipos de ciberataques dirigidos a estas plataformas y propone la implementación
de un Sistema de Gestión de la Seguridad de la Información (SGSI) como una solución eficaz para
salvaguardar la información, garantizar la continuidad operativa y fortalecer la confianza del
consumidor.
Palabras clave: ciberseguridad, comercio electrónico, ISO 27001, SGSI, México
Artículo recibido 20 marzo 2026
Aceptado para publicación: 29 abril 2026
Ciberseguridad en la era del Comercio Electrónico: Basada en la Norma
ISO 27001
RESUMEN
Este artículo examina la relevancia de la norma ISO/IEC 27001 como marco estratégico para mitigar
los riesgos de ciberseguridad en el comercio electrónico, con especial énfasis en el contexto mexicano.
Aborda los principales tipos de ciberataques dirigidos a estas plataformas y propone la implementación
de un Sistema de Gestión de la Seguridad de la Información (SGSI) como una solución eficaz para
salvaguardar la información, garantizar la continuidad operativa y fortalecer la confianza del
consumidor.
Palabras clave: ciberseguridad, comercio electrónico, ISO 27001, SGSI, México
Artículo recibido 20 marzo 2026
Aceptado para publicación: 29 abril 2026
pág. 10466
INTRODUCTION
In the contemporary digital era, online commerce has expanded significantly, fostering interactions
between businesses and consumers that are fast, efficient, and global in nature. Nevertheless, this new
reality brings with it additional risks, particularly in the sphere of online security. Within Latin America,
Mexico has distinguished itself as one of the country’s most severely impacted by cyberattacks.
According to Castañares (2022), approximately 66% of the attacks in the region are directed at Mexico,
with e-commerce platforms representing one of the principal targets.
Cybersecurity Threats in E-Commerce
Cyberattacks targeting these platforms can have severe repercussions for both business entities and
consumers. The most frequent impacts include the theft of personal and financial information, system
hijacking through ransomware, unauthorized access to user accounts, credit card fraud, and service
disruptions caused by denial-of-service (DDoS) attacks. These incidents jeopardize the confidentiality
of data, generate significant economic losses, and undermine the reputation and credibility of companies
within the digital landscape.
In light of this situation, it is essential to establish robust mechanisms to safeguard information resources
and ensure the operational continuity of businesses. Within this context, the international standard
ISO/IEC 27001 is regarded as a crucial instrument. This standard defines the requirements for
designing, implementing, maintaining, and continually improving an Information Security
Management System (ISMS). By adopting it, organizations are able to identify risks, establish effective
controls, and respond appropriately to security incidents.
Beyond providing a well-defined framework, the ISO/IEC 27001 standard facilitates the standardization
of security practices, fosters an organizational culture that prioritizes information protection, and builds
trust among clients, partners, and users. Its comprehensive approach is grounded in the essential
principles of information security: confidentiality, integrity, and availability.
Information security encompasses a structured set of techniques and measures aimed at controlling all
data handled within an institution, ensuring that it remains confined to the system established by the
organization.
INTRODUCTION
In the contemporary digital era, online commerce has expanded significantly, fostering interactions
between businesses and consumers that are fast, efficient, and global in nature. Nevertheless, this new
reality brings with it additional risks, particularly in the sphere of online security. Within Latin America,
Mexico has distinguished itself as one of the country’s most severely impacted by cyberattacks.
According to Castañares (2022), approximately 66% of the attacks in the region are directed at Mexico,
with e-commerce platforms representing one of the principal targets.
Cybersecurity Threats in E-Commerce
Cyberattacks targeting these platforms can have severe repercussions for both business entities and
consumers. The most frequent impacts include the theft of personal and financial information, system
hijacking through ransomware, unauthorized access to user accounts, credit card fraud, and service
disruptions caused by denial-of-service (DDoS) attacks. These incidents jeopardize the confidentiality
of data, generate significant economic losses, and undermine the reputation and credibility of companies
within the digital landscape.
In light of this situation, it is essential to establish robust mechanisms to safeguard information resources
and ensure the operational continuity of businesses. Within this context, the international standard
ISO/IEC 27001 is regarded as a crucial instrument. This standard defines the requirements for
designing, implementing, maintaining, and continually improving an Information Security
Management System (ISMS). By adopting it, organizations are able to identify risks, establish effective
controls, and respond appropriately to security incidents.
Beyond providing a well-defined framework, the ISO/IEC 27001 standard facilitates the standardization
of security practices, fosters an organizational culture that prioritizes information protection, and builds
trust among clients, partners, and users. Its comprehensive approach is grounded in the essential
principles of information security: confidentiality, integrity, and availability.
Information security encompasses a structured set of techniques and measures aimed at controlling all
data handled within an institution, ensuring that it remains confined to the system established by the
organization.
pág. 10467
This study aims to examine the relevance of the ISO/IEC 27001 standard as a strategy to reduce security
risks in electronic commerce, with particular emphasis on the Mexican context. In addition, it explores
the most common types of cyberattacks affecting these platforms, with the objective of identifying how
the proper implementation of this standard can prevent, mitigate, or effectively respond to such
incidents, thereby strengthening the security posture of organizations.
Problem Statement
E-commerce has experienced remarkable growth in recent years, revolutionizing the way consumers
purchase products and services. This modality enables transactions to be carried out quickly and
conveniently, without the need for physical presence, which has contributed to its exponential
expansion. However, this very growth entails significant challenges, particularly regarding information
security, which has become a central concern.
By handling vast amounts of confidential data—both from users and from the organizations
themselves—e-commerce platforms have become attractive targets for cybercriminals. Among the most
common threats are fraud, identity theft, phishing, unauthorized access to accounts, and the malicious
use of financial information.
According to Galaz, Yamazaki, Ruiz Urquiza, S.C. (2024), Mexico currently represents the largest e-
commerce market in Latin America, generating an annual expenditure of approximately 21 billion U.S.
dollars. This figure underscores the magnitude and significance of the sector within the regional
economic landscape. Consequently, companies in this field must ensure the security of all user and
stakeholder data, as such protection directly influences customer trust and brand reputation.
Moreover, it is estimated that the value of e-commerce in Mexico increases by 28% each year,
reaffirming its consolidation as a dominant business model. Nevertheless, as technology advances, so
too do the tactics of cybercriminals, which demands a proactive, strategic, and continuously updated
approach to cybersecurity.
In this context, the present study analyzes the current state of security in e-commerce in Mexico and
proposes measures to enhance risk management and information protection. To this end, it examines
the most common cases of cyberattacks in this sector and evaluates how the implementation of the
This study aims to examine the relevance of the ISO/IEC 27001 standard as a strategy to reduce security
risks in electronic commerce, with particular emphasis on the Mexican context. In addition, it explores
the most common types of cyberattacks affecting these platforms, with the objective of identifying how
the proper implementation of this standard can prevent, mitigate, or effectively respond to such
incidents, thereby strengthening the security posture of organizations.
Problem Statement
E-commerce has experienced remarkable growth in recent years, revolutionizing the way consumers
purchase products and services. This modality enables transactions to be carried out quickly and
conveniently, without the need for physical presence, which has contributed to its exponential
expansion. However, this very growth entails significant challenges, particularly regarding information
security, which has become a central concern.
By handling vast amounts of confidential data—both from users and from the organizations
themselves—e-commerce platforms have become attractive targets for cybercriminals. Among the most
common threats are fraud, identity theft, phishing, unauthorized access to accounts, and the malicious
use of financial information.
According to Galaz, Yamazaki, Ruiz Urquiza, S.C. (2024), Mexico currently represents the largest e-
commerce market in Latin America, generating an annual expenditure of approximately 21 billion U.S.
dollars. This figure underscores the magnitude and significance of the sector within the regional
economic landscape. Consequently, companies in this field must ensure the security of all user and
stakeholder data, as such protection directly influences customer trust and brand reputation.
Moreover, it is estimated that the value of e-commerce in Mexico increases by 28% each year,
reaffirming its consolidation as a dominant business model. Nevertheless, as technology advances, so
too do the tactics of cybercriminals, which demands a proactive, strategic, and continuously updated
approach to cybersecurity.
In this context, the present study analyzes the current state of security in e-commerce in Mexico and
proposes measures to enhance risk management and information protection. To this end, it examines
the most common cases of cyberattacks in this sector and evaluates how the implementation of the
pág. 10468
ISO/IEC 27001 standard can significantly contribute to mitigating these threats and strengthening the
security of digital platforms.
This standard is designed primarily to strengthen a company’s information management software or
system. It is not intended to improve the organization as a whole; rather, it focuses specifically on
aspects related to data protection and the secure operation of the technological platforms employed by
the company.
JUSTIFICATION
E-commerce has experienced remarkable growth in recent years, revolutionizing the way consumers
purchase products and services. This modality allows transactions to be carried out quickly and
conveniently, without the need for physical presence, which has contributed to its exponential
expansion. However, this same growth entails significant challenges, particularly in relation to
information security, which has become a fundamental concern.
By managing vast amounts of confidential data—both from users and from the organizations
themselves—e-commerce platforms have become highly attractive targets for cybercriminals. Among
the most common threats are fraud, identity theft, phishing, unauthorized access to accounts, and the
malicious use of financial information.
This implies that companies may face a range of consequences as a result of such attacks, including
reputational damage, operational disruptions, and, in some cases, even the loss of business continuity.
Furthermore, all scenarios are marked by significant monetary losses. For this reason, it is crucial to
have a standard such as ISO/IEC 27001 that contributes to mitigating these risks.
Among the most common consequences derived from these attacks are the theft of personal data
(whether confidential information belonging to the company or its users), the loss of credibility and the
resulting erosion of customer trust, the interruption of services—namely, the inability to operate
normally—and ransomware, which involves the hijacking of a company’s data with a financial ransom
demanded for its recovery.
ISO/IEC 27001 standard can significantly contribute to mitigating these threats and strengthening the
security of digital platforms.
This standard is designed primarily to strengthen a company’s information management software or
system. It is not intended to improve the organization as a whole; rather, it focuses specifically on
aspects related to data protection and the secure operation of the technological platforms employed by
the company.
JUSTIFICATION
E-commerce has experienced remarkable growth in recent years, revolutionizing the way consumers
purchase products and services. This modality allows transactions to be carried out quickly and
conveniently, without the need for physical presence, which has contributed to its exponential
expansion. However, this same growth entails significant challenges, particularly in relation to
information security, which has become a fundamental concern.
By managing vast amounts of confidential data—both from users and from the organizations
themselves—e-commerce platforms have become highly attractive targets for cybercriminals. Among
the most common threats are fraud, identity theft, phishing, unauthorized access to accounts, and the
malicious use of financial information.
This implies that companies may face a range of consequences as a result of such attacks, including
reputational damage, operational disruptions, and, in some cases, even the loss of business continuity.
Furthermore, all scenarios are marked by significant monetary losses. For this reason, it is crucial to
have a standard such as ISO/IEC 27001 that contributes to mitigating these risks.
Among the most common consequences derived from these attacks are the theft of personal data
(whether confidential information belonging to the company or its users), the loss of credibility and the
resulting erosion of customer trust, the interruption of services—namely, the inability to operate
normally—and ransomware, which involves the hijacking of a company’s data with a financial ransom
demanded for its recovery.
pág. 10469
Research Objectives
General Objective
To analyze vulnerabilities in e-commerce security, identifying potential threats in order to protect
stakeholder data, and to contribute strategies based on the ISO/IEC 27001 standard.
Specific Objectives
▪ To identify the main types of cybersecurity threats affecting online transactions.
▪ To analyze case studies of fraud in digital transactions and their consequences.
▪ To evaluate best practices and available technologies, using ISO/IEC 27001 as a reference
framework for securing online transactions.
▪ To propose a set of recommendations to improve security in e-commerce platforms, grounded in
the ISO/IEC 27001 standard.
Hypothesis
The implementation of an information security management system based on the ISO/IEC 27001
standard in e-commerce platforms in Mexico will safeguard against vulnerabilities in electronic
commerce and strengthen the protection of users’ sensitive data. In turn, this will foster greater
consumer confidence and, consequently, an increase in online transactions.
Proposed Solution
A diagnostic framework is proposed for the implementation of an Information Security Management
System (ISMS) based on the ISO/IEC 27001 standard. This process involves a comprehensive analysis
aimed at identifying e-commerce companies and understanding their current vulnerabilities, as well as
the specific threats they face. In developing this diagnostic, the following key steps are considered:
1. Information Gathering
2. Vulnerability Analysis
3. Threat Identification
4. Risk Assessment
5. Results Report
Research Objectives
General Objective
To analyze vulnerabilities in e-commerce security, identifying potential threats in order to protect
stakeholder data, and to contribute strategies based on the ISO/IEC 27001 standard.
Specific Objectives
▪ To identify the main types of cybersecurity threats affecting online transactions.
▪ To analyze case studies of fraud in digital transactions and their consequences.
▪ To evaluate best practices and available technologies, using ISO/IEC 27001 as a reference
framework for securing online transactions.
▪ To propose a set of recommendations to improve security in e-commerce platforms, grounded in
the ISO/IEC 27001 standard.
Hypothesis
The implementation of an information security management system based on the ISO/IEC 27001
standard in e-commerce platforms in Mexico will safeguard against vulnerabilities in electronic
commerce and strengthen the protection of users’ sensitive data. In turn, this will foster greater
consumer confidence and, consequently, an increase in online transactions.
Proposed Solution
A diagnostic framework is proposed for the implementation of an Information Security Management
System (ISMS) based on the ISO/IEC 27001 standard. This process involves a comprehensive analysis
aimed at identifying e-commerce companies and understanding their current vulnerabilities, as well as
the specific threats they face. In developing this diagnostic, the following key steps are considered:
1. Information Gathering
2. Vulnerability Analysis
3. Threat Identification
4. Risk Assessment
5. Results Report
pág. 10470
E-commerce companies are expected to develop a reliable preliminary diagnostic to understand their
current security posture, which will serve as the foundation for creating a robust Information Security
Management System (ISMS) that complies with the ISO/IEC 27001 standard. In doing so, they can
ensure comprehensive data protection and strengthen consumer trust in e-commerce.
Scope and Limitations
Scope
The project aims to address the needs of digital companies engaged in e-commerce regarding the
security of both their users and their platforms, in order to build trust in the use of their services.
Moreover, the project is designed for Mexican companies, in alignment with the legislation under which
they operate.
Limitations
Although the implementation of the ISO/IEC 27001 standard entails a significant cost, it can be
considered initially as a guiding framework with the prospect of obtaining certification in the future.
Another challenge to overcome is raising awareness among CEOs who are willing to adopt the standard
as a strategic measure, particularly given statistics showing that “Mexico received 324 billion attempted
cyberattacks in 2024” (Fortinet, 2024).
METHODOLOGY
A systematic review of the literature was conducted on the topics of cybersecurity in e-commerce and
the ISO/IEC 27001 standard, following the PRISMA statement (Preferred Reporting Items for
Systematic Reviews and Meta-Analyses). Within this framework, a research question was defined as
follows: Does the application of the ISO/IEC 27001 standard as a strategy reduce cybersecurity risks
in e-commerce?
PRISMA Method Stages
Identification: Relevant literature is searched through electronic databases and other sources. The
references found are recorded.
Selection: Inclusion and exclusion criteria are applied to the identified studies to determine which will
be incorporated into the review.
E-commerce companies are expected to develop a reliable preliminary diagnostic to understand their
current security posture, which will serve as the foundation for creating a robust Information Security
Management System (ISMS) that complies with the ISO/IEC 27001 standard. In doing so, they can
ensure comprehensive data protection and strengthen consumer trust in e-commerce.
Scope and Limitations
Scope
The project aims to address the needs of digital companies engaged in e-commerce regarding the
security of both their users and their platforms, in order to build trust in the use of their services.
Moreover, the project is designed for Mexican companies, in alignment with the legislation under which
they operate.
Limitations
Although the implementation of the ISO/IEC 27001 standard entails a significant cost, it can be
considered initially as a guiding framework with the prospect of obtaining certification in the future.
Another challenge to overcome is raising awareness among CEOs who are willing to adopt the standard
as a strategic measure, particularly given statistics showing that “Mexico received 324 billion attempted
cyberattacks in 2024” (Fortinet, 2024).
METHODOLOGY
A systematic review of the literature was conducted on the topics of cybersecurity in e-commerce and
the ISO/IEC 27001 standard, following the PRISMA statement (Preferred Reporting Items for
Systematic Reviews and Meta-Analyses). Within this framework, a research question was defined as
follows: Does the application of the ISO/IEC 27001 standard as a strategy reduce cybersecurity risks
in e-commerce?
PRISMA Method Stages
Identification: Relevant literature is searched through electronic databases and other sources. The
references found are recorded.
Selection: Inclusion and exclusion criteria are applied to the identified studies to determine which will
be incorporated into the review.
pág. 10471
Data Extraction: Relevant data are collected from the selected studies using standardized forms to
ensure consistency.
Synthesis: The extracted data are analyzed and synthesized.
Risk of Bias Assessment: The quality of the included studies and the risk of bias are evaluated, aiding
in the interpretation of results.
Discussion: The results are discussed in the context of the existing literature, along with the
implications and limitations of the study.
Conclusions: The main findings are summarized, and directions for future research are suggested.
The following section presents the research results based on this methodology:
Table 1 Note. First part of the research articles table.
Table 2 Note. Second part of the research articles table.
Source: Own elaboration.
Figure 1 Note. Count of countries for data collection.
Source: Own elaboration.
Data Extraction: Relevant data are collected from the selected studies using standardized forms to
ensure consistency.
Synthesis: The extracted data are analyzed and synthesized.
Risk of Bias Assessment: The quality of the included studies and the risk of bias are evaluated, aiding
in the interpretation of results.
Discussion: The results are discussed in the context of the existing literature, along with the
implications and limitations of the study.
Conclusions: The main findings are summarized, and directions for future research are suggested.
The following section presents the research results based on this methodology:
Table 1 Note. First part of the research articles table.
Table 2 Note. Second part of the research articles table.
Source: Own elaboration.
Figure 1 Note. Count of countries for data collection.
Source: Own elaboration.
pág. 10472
Figure 2 Note. Count of researched topics.
Source: Own elaboration.
Image 1 Note. Broad explanation of an electronic purchase.
Source: Egorov (n.d.)
CONCLUSION
Addressing information security in e-commerce is not merely a technical necessity but a key strategy
for the sustainability of medium and large enterprises in an environment increasingly rooted in
technology—an environment that is, in turn, ever more frequently threatened by cyberattacks. This
study demonstrates that the implementation of international standards such as ISO/IEC 27001 can
represent a significant competitive advantage, by establishing a management system that safeguards the
integrity, confidentiality, and availability of information for both users and employees.
Figure 2 Note. Count of researched topics.
Source: Own elaboration.
Image 1 Note. Broad explanation of an electronic purchase.
Source: Egorov (n.d.)
CONCLUSION
Addressing information security in e-commerce is not merely a technical necessity but a key strategy
for the sustainability of medium and large enterprises in an environment increasingly rooted in
technology—an environment that is, in turn, ever more frequently threatened by cyberattacks. This
study demonstrates that the implementation of international standards such as ISO/IEC 27001 can
represent a significant competitive advantage, by establishing a management system that safeguards the
integrity, confidentiality, and availability of information for both users and employees.
pág. 10473
Adopting this standard enables organizations to identify and proactively manage risks associated with
the use of digital technologies, prevent economic losses, ensure regulatory compliance, and—most
importantly—build trust among clients, business partners, and employees. Furthermore, it fosters an
organizational culture oriented toward the protection of both corporate and personal data, directly
influencing the company’s reputation and credibility in the marketplace.
Ultimately, investing in information security not only reduces technical vulnerabilities but also
strengthens the organizational structure and protects one of the most valuable assets a company can
possess today: information.
BIBLIOGRAPHIC REFERENCES
Torre, G. S., & Codner, D. G. (2013). Fundamentos de Comercio [Fundamentals of Commerce].
Universidad Virtual de Quilmes, Buenos Aires.
Turban, E., Volonino, L., & Wood, G. R. (2010). Information Technology for Management. Wiley,
New York.
Carrasco Fernández, S. (2014). Venta online [Online Sales]. Ediciones Paraninfo, Madrid.
Laudon, K., & Traver, C. (2009). E-Commerce: Business, Technology, Society. Pearson Prentice Hall,
New York.
Martínez Nadal, A. (2001). Comercio electrónico, firma digital y autoridades de certificación [E-
Commerce, Digital Signatures, and Certification Authorities]. Aranzadi, Madrid.
Mateu De Ros, R. (2000). El consentimiento y el proceso de contratación electrónica [Consent and the
Process of Electronic Contracting]. Aranzadi, Pamplona.
Fernández, C. M. (2012). La norma ISO 27001 del Sistema de Gestión de la Seguridad de la
Información [The ISO 27001 Standard of the Information Security Management System].
Calidad, 40–44.
Podrecca, M., Culot, G., Nassimbeni, G., & Sartor, M. (2022). Information security & value creation:
The performance implications of ISO/IEC 27001. Computers in Industry, 142, 2–10.
Freitas, D. (2009). Análisis y evaluación del riesgo de la información: caso de estudio Universidad
Simón Bolivar [Analysis and Evaluation of Information Risk: Case Study of Simón Bolívar
University]. Enlace, 6(1), 13.
Adopting this standard enables organizations to identify and proactively manage risks associated with
the use of digital technologies, prevent economic losses, ensure regulatory compliance, and—most
importantly—build trust among clients, business partners, and employees. Furthermore, it fosters an
organizational culture oriented toward the protection of both corporate and personal data, directly
influencing the company’s reputation and credibility in the marketplace.
Ultimately, investing in information security not only reduces technical vulnerabilities but also
strengthens the organizational structure and protects one of the most valuable assets a company can
possess today: information.
BIBLIOGRAPHIC REFERENCES
Torre, G. S., & Codner, D. G. (2013). Fundamentos de Comercio [Fundamentals of Commerce].
Universidad Virtual de Quilmes, Buenos Aires.
Turban, E., Volonino, L., & Wood, G. R. (2010). Information Technology for Management. Wiley,
New York.
Carrasco Fernández, S. (2014). Venta online [Online Sales]. Ediciones Paraninfo, Madrid.
Laudon, K., & Traver, C. (2009). E-Commerce: Business, Technology, Society. Pearson Prentice Hall,
New York.
Martínez Nadal, A. (2001). Comercio electrónico, firma digital y autoridades de certificación [E-
Commerce, Digital Signatures, and Certification Authorities]. Aranzadi, Madrid.
Mateu De Ros, R. (2000). El consentimiento y el proceso de contratación electrónica [Consent and the
Process of Electronic Contracting]. Aranzadi, Pamplona.
Fernández, C. M. (2012). La norma ISO 27001 del Sistema de Gestión de la Seguridad de la
Información [The ISO 27001 Standard of the Information Security Management System].
Calidad, 40–44.
Podrecca, M., Culot, G., Nassimbeni, G., & Sartor, M. (2022). Information security & value creation:
The performance implications of ISO/IEC 27001. Computers in Industry, 142, 2–10.
Freitas, D. (2009). Análisis y evaluación del riesgo de la información: caso de estudio Universidad
Simón Bolivar [Analysis and Evaluation of Information Risk: Case Study of Simón Bolívar
University]. Enlace, 6(1), 13.
pág. 10474
García-Perdomo, H. A. (2015). Conceptos fundamentales de las revisiones sistemáticas/metaanálisis
[Fundamental Concepts of Systematic Reviews/Meta-Analyses]. Urología Colombiana, 28–34.
Xiang, L., Sayed, F. A., Muhammad, K. A., Jingying, K., Muhammad, I., Jabbar, U.-H., & Shujaat, A.
(2022). Cyber security threats: A never-ending challenge for e-commerce. Frontiers in
Psychology, 13(2), 7.
Nolte, A., Abasi-amefon, A., & Raimundas, M. (2020). Security risk management in e-commerce
systems: A threat-driven approach. Modern Computing, 8(2), 28.
Khan, S. (2019). Cyber security issues & challenges in e-commerce. SSRN, 10(5), 8.
Sylvanus, E., & Adepele, O. (2019). A formal model of distributed security for electronic commerce
transactions systems. International Journal of Networked & Distributed Computing, 7(2), 17.
Ibrahim, A. (2022). Integrated e-commerce security model for websites. International Journal of
Advanced & Applied Sciences, 9(4), 8.
Raphael, A. O., Sulaiman, A. O., & Babatola, O. M. (2020). A security model for preventing e-
commerce related crimes. Applied Computer Science, 16(3), 12.
Shweta, K., & Charu, G. (2019). Ensure hierarchal identity-based data security in cloud environment.
International Journal of Cloud Applications & Computing, 9(4), 16.
Culot, G. (2021). The ISO/IEC 27001 information security management standard: Literature review &
theory-based research agenda. The TQM Journal.
Zhu, X., & Zhu, Y. (2019). Extension of ISO/IEC 27001 to mobile devices security management.
Communications in Computer & Information Science.
Pacheco, F. (2010). La importancia de un SGSI [The Importance of an ISMS]. WeLiveSecurity,
September 10. Available at: [link] (accessed August 4, 2025).
Pérez, A. (2017). Seguridad de la información: Un conocimiento imprescindible [Information Security:
An Essential Knowledge]. OBS Business School, October 9. Available at: [link] (accessed
August 4, 2025).
Egorov, R. (n.d.). Compra en línea: 5 pasos. Diagrama de flujo de procesos de compra [Online
Shopping: 5 Steps. Process Flow Diagram] [Infographic]. Dreamstime. Available at: [link]
(accessed August 4, 2025).
García-Perdomo, H. A. (2015). Conceptos fundamentales de las revisiones sistemáticas/metaanálisis
[Fundamental Concepts of Systematic Reviews/Meta-Analyses]. Urología Colombiana, 28–34.
Xiang, L., Sayed, F. A., Muhammad, K. A., Jingying, K., Muhammad, I., Jabbar, U.-H., & Shujaat, A.
(2022). Cyber security threats: A never-ending challenge for e-commerce. Frontiers in
Psychology, 13(2), 7.
Nolte, A., Abasi-amefon, A., & Raimundas, M. (2020). Security risk management in e-commerce
systems: A threat-driven approach. Modern Computing, 8(2), 28.
Khan, S. (2019). Cyber security issues & challenges in e-commerce. SSRN, 10(5), 8.
Sylvanus, E., & Adepele, O. (2019). A formal model of distributed security for electronic commerce
transactions systems. International Journal of Networked & Distributed Computing, 7(2), 17.
Ibrahim, A. (2022). Integrated e-commerce security model for websites. International Journal of
Advanced & Applied Sciences, 9(4), 8.
Raphael, A. O., Sulaiman, A. O., & Babatola, O. M. (2020). A security model for preventing e-
commerce related crimes. Applied Computer Science, 16(3), 12.
Shweta, K., & Charu, G. (2019). Ensure hierarchal identity-based data security in cloud environment.
International Journal of Cloud Applications & Computing, 9(4), 16.
Culot, G. (2021). The ISO/IEC 27001 information security management standard: Literature review &
theory-based research agenda. The TQM Journal.
Zhu, X., & Zhu, Y. (2019). Extension of ISO/IEC 27001 to mobile devices security management.
Communications in Computer & Information Science.
Pacheco, F. (2010). La importancia de un SGSI [The Importance of an ISMS]. WeLiveSecurity,
September 10. Available at: [link] (accessed August 4, 2025).
Pérez, A. (2017). Seguridad de la información: Un conocimiento imprescindible [Information Security:
An Essential Knowledge]. OBS Business School, October 9. Available at: [link] (accessed
August 4, 2025).
Egorov, R. (n.d.). Compra en línea: 5 pasos. Diagrama de flujo de procesos de compra [Online
Shopping: 5 Steps. Process Flow Diagram] [Infographic]. Dreamstime. Available at: [link]
(accessed August 4, 2025).