Evaluación de la seguridad tecnológica de la información de la Carrera de Ingeniería en Telemática de la Universidad de Guayaquil.
No hay miniatura disponible
Fecha
2020-06-09
Autores
Título de la revista
ISSN de la revista
Título del volumen
Editor
Universidad de Guayaquil. Facultad de Ingeniería Industrial. Carrera de Ingeniería en Teleinformática.
Resumen
Mediante el siguiente estudio se realizó un inventario de activos que permite reconocer
las amenazas y vulnerabilidades que presenta el departamento de cómputo de la Carrera de
Ingeniería Telemática como: hardware, software, información de redes, seguridad física,
eléctrica y seguridad de la información, a través del análisis de la Norma ISO 27001, es
muy importante tener en cuenta las políticas de seguridad que deben ser fortalecidas y que
los usuarios se comprometan a cumplir con las mismas al realizar sus labores diarias;
después de analizar todas las vulnerabilidades se procede a la aplicación de objetivos de
control y controles de referencia o también conocido como Anexo A del SGSI; la manera
en la que se efectúa este estudio es mediante la observación, análisis y entrevista que ayuda
a obtener resultados reales de la auditoría realizada a la organización; además de realizar
una investigación descriptiva, documental y bibliográfica. El análisis tiene como objetivo
principal determinar resultados propicios que ayude a realizar este proyecto, utilizando
herramientas que ayuden a mejorar la seguridad de la organización.
Through the following study, an inventory of assets was carried out to recognize the threats and vulnerabilities presented by the computer department of the Telematic Engineering Degree, such as: hardware, software, network information, physical, electrical and information security, to Through the analysis of the ISO 27001 Standard, it is very important to take into account the security policies that must be strengthened and that the users commit to comply with them when carrying out their daily tasks; after analyzing all the vulnerabilities, we proceed to the application of control objectives and reference controls or also known as Annex A of the ISMS; the way in which this study is carried out is through observation, analysis and interview that helps to obtain real results of the audit carried out on the organization; in addition to carrying out descriptive, documentary and bibliographic research. The main objective of the analysis is to determine favorable results to help carry out this project, using tools that help improve the security of the organizatio
Through the following study, an inventory of assets was carried out to recognize the threats and vulnerabilities presented by the computer department of the Telematic Engineering Degree, such as: hardware, software, network information, physical, electrical and information security, to Through the analysis of the ISO 27001 Standard, it is very important to take into account the security policies that must be strengthened and that the users commit to comply with them when carrying out their daily tasks; after analyzing all the vulnerabilities, we proceed to the application of control objectives and reference controls or also known as Annex A of the ISMS; the way in which this study is carried out is through observation, analysis and interview that helps to obtain real results of the audit carried out on the organization; in addition to carrying out descriptive, documentary and bibliographic research. The main objective of the analysis is to determine favorable results to help carry out this project, using tools that help improve the security of the organizatio
Descripción
Este documento contiene archivo en PDF.
Palabras clave
SEGURIDAD DE INFORMACIÓN, AUDITORIA INFORMÁTICA, VULNERABILIDADES, NORMA ISO 27001