Clarification
Kudo is an original framework based on analysis and experience
Clarification
Kudo is a cybersecurity framework created from critical analysis and practical experience accumulated in real business contexts in Latin America.
How was Kudo born?
Kudo comes from our philosophy and from a concrete question: Why are existing cybersecurity frameworks hard to adopt in Latin American companies?
The answer isn't that global standards are wrong. The answer is that context matters. Company size, team maturity, available budget, the company's risk appetite, the region's regulatory reality and the growth speed of tech companies in LatAm create needs that the big frameworks address with a very high barrier to entry.
Kudo was built from scratch applying the following process:
- Direct observation of how cybersecurity teams operate in companies in the region.
- Analysis of the most frequent problems organizations face when trying to implement security controls.
- Our own synthesis of which controls are truly actionable, measurable and sustainable over time.
- Iterative validation through professional practice across different industries and company sizes.
The result is a structure of 8 domains and their associated controls, whose grouping, naming, definition and approach are original.
Use of reference frameworks
Kudo includes a Mapping section based on our ISMS that maps its controls to recognized standards such as ISO 27001:2022, NIST CSF, CIS Controls, SOC 2, PCI DSS, among others.
This mapping has a clear purpose: making it easier for organizations already working with those standards to adopt Kudo, or vice versa. The mapping is a traceability reference to the tools we keep building.
Framework license and use
Open Source
Kudo is an open-source project. Its source code is available on GitHub. The framework can be freely used, adapted and referenced, as long as its original authorship is acknowledged.