Publicación:

Análisis de Riesgos de la Seguridad de la Información para el elemento personas y la forma en que manejan la información en la Alcaldía de Arauca para el área de Sistemas basados en el estándar ISO 27001:2013 para el año 2020

Resumen

This undergraduate project is part of the Seminar Workshop on Improvement modality which focused on Information Security. The topics that were seen there and the knowledge that were acquired, are implemented by carrying out a risk analysis to the area of Systems of the Mayor of Arauca using the MAGERIT methodology and the Pilar tool in its version 7.4.4. To carry out the risk analysis, it is part of characterizing the area of Systems of the Mayor of Arauca, in this way the current state is known according to the domains evaluated. The assets are then identified, this in order to be able to assess their dimensions and thus know what threats can attack them. Knowing the threats and valuing them, we finally get to review the safeguards that the Systems area has, since it is very crucial to know how it is being faced with possible threats in order to avoid the realization of them. Once the risk analysis is carried out, some controls with lower index are selected according to the results obtained previously, giving rise to three documents which provide clean desktop and clean screen policies, steps to remove access rights to officials and a guide to installation and use of secure password generation software