# Analysis of Dynamic Complexity of the Cyber Security Ecosystem of Colombia
## 1 Introduction  
Technological advances, in particular the widespread use of Internet by people and companies, have created an open space for the exchange of data and information. Different actors participate in this virtual and technological platform: users, who use it to carry out their daily personal or work related activities but also \"intruders\", who use the web for their own benefit by taking advantage of the diverse existing vulnerabilities and the high amount of users with little knowledge about the risks and threats to which they are exposed in this communication channel. This has created an important challenge in the protection of the information and infrastructure that are found on the Internet.  
Cyberspace, as a result of the Internet and defined as the virtual environment that concentrates the diverse infrastructures, technological devices, and people who connect to the network, has brought about an evolution of the concept of Information security into cyberspace security. Aforementioned infrastructures, devices, and connected people range from small networks at home to state networks, large industries, communication service providers, as well as others.  
Consequently, there exists a panorama filled with challenges to take up and gaps to close, in order to face the risks and threats present in cyberspace, which potentially expose actors to cyber-attacks, cyber-espionage, cyber-terrorism, cyber-bullying, hacktivism, amongst others. Physical borders are diluted when exposed to different sectors of society in cyberspace.  
Lately, the Colombian government has shown interest in Information Security, as well as in the current reality of exposure of diverse sectors of society to cybernetic threats. There is legislationregarding this subject since 1999, ranging from the Law of Electronic Commerce to the Statutory Law 1571 of 2012 regarding the protection of personal data. Additionally, the National Economic and Social Policy Council CONPES 3701 document, active from 2011 to 2015, defines the guidelines to be followed by the State regarding cyber security and cyber defence for Colombia, with the purpose of improving the capabilities of the state for dealing with possible threats in cyberspace.  
In 2014, the Mission of Technical Assistance on Cybernetic Security sent by the Organization of American States (OAS) published a document with conclusions and recommendations that give consideration to, amongst other things, the need of action in Colombia so that efforts can be made to work in cyber security due to a lack of a clear strategic vision [1].  
Based on these considerations, this research paper proposes a definition of the Cyber security Ecosystem of Colombia, which establishes its components, the strategic vision of cyber security in government institutions and the analysis of the complexity of the ecosystem using the Influences Model of System Dynamics and the Domain Model of Software Engineering. As defined by [2], both models were created as a way of representing relevant aspects of the system, and they help to comprehend it adequately.  
The rest of this paper is structured as follows: Section 2 describes the concepts to be taken into account to define the ecosystem. Section 3 details the Cyber security Ecosystem of Colombia. Section 4 describes the complexity of the cyber security ecosystem through an Influence Diagram of System Dynamics and the Domain Model of Software Engineering. Lastly, conclusions can be found in Section 5.