Publicación:

Estudio del análisis de riesgo acerca de la seguridad de la información a través de la gestión tecnológica en la asociación Frepaem-saravena

Resumen

This paper aims to study the information security management through technology present in the FREPAEN Association - Saravena applying the standard ISO 27002: 2005 and MAGERIT methodology at the stage of risk analysis. As the first specific objective are the current status of the company against the security of information, so the procedures and activities undertaken by the Association in each of the domains, objectives and controls were analyzed ISO 27002 : 2005 through value criteria according to the compliance aspects established security policies. Secondly risk analysis locates in information assets. This analysis consists of identifying threats and risks to which information is displayed, along with the characterization of the state of the integrity, confidentiality, availability, authenticity and traceability in order to identify the safeguards to help mitigate the risks. As a third objective recommendations are security policies clear and organized in order to realize relevant to the design, document and implement security policies aspects form. In the fourth the characterization of technological management service entities managers in child development in a family environment in the municipality of Saravena program, which is given to know the different aspects to be considered at the time located technological resources to manage alliances, strategies and innovation that contribute to the continuity of the business in the short, medium and long term. Finally socialization present to management aspects mentioned above as direct and total interest involved in the boot process and project completion. Taking a satisfactory result compared to work done in Saravena FREPAEN- Association as they expressed their full interest in continuing to liaise with the university.