Publicación:

Análisis de riesgos basado en los dominios 8 y 11 de la ISO/IEC 27002:2013 para el área de Almacén e Inventarios del Centro de Gestión y Desarrollo Agroindustrial de Arauca (SENA)

Resumen

The National Cryptological Center (CCN) developed the PILAR solution as a Risk Analysis Environment (EAR) tool, which supports the analysis and risk management of an information system following the MAGERIT methodology (Risk Analysis and Management Methodology Information Systems), through this tool the risks are analyzed in the dimensions of confidentiality, integrity, availability, authenticity and traceability. (CCN-CERT, 20). With this tool and following the objectives of the MAGERIT methodology, the current state of the information processes of the Warehouse and Inventory area of the Center for Management and Agroindustrial Development of Arauca SENA is analyzed, based on the ISO / IEC 27002: 2013 standard. in its domains 8 and 11. After the risk analysis, it is evident which are the controls that are non-existent or very little developed in the evaluated domains, so based on these results, suggestions, recommendations or guidelines are given, which can help to implement safeguards that allow to mitigate the risks. risks posed by each threat to the organization's most important information assets.