Publicación:

Análisis de riesgos y vulnerabilidades como estrategia para la gestión de políticas de seguridad y privacidad de la información de la ie Felix de Bedout Moreno

Resumen

Computer security is responsible for protecting the confidentiality, integrity, privacy and availability of information stored in a computer system, thus ensuring that only users authorized to perform certain activities within the system can access the information, establishing a level of privacy, that is, the protection of personal data. In this sense, computer security emerges as that way of avoiding the risks and vulnerability of data that are private; Due to the importance of this concept, the following proposal was proposed to carry out a case study where the risks and vulnerabilities to which the Félix de Bedout Moreno Educational Institution in the city of Medellín is exposed were analyzed, and then adopted as a strategy to management, a security and privacy policy for institutional information. From the methodological point of view, this research will be analytical and uses instruments such as documentary review, databases and comparative tables, among others. The results indicate that the information of the aforementioned institution presents risks in terms of its structure and processes around the use of software and hardware, since they do not have a use policy and the current processes do not warn of the possibility of risk. It is concluded that the analysis of risks and vulnerabilities is a high-impact management strategy for the computer security of any institution.