Auditoría de Seguridad Informática del Centro de Procesamiento de Datos de la Empresa EDPACIF S.A; implementación de una aplicación Web para la administración de los elementos auditados

Abstract

The process audit is based on the study of the basic components that guarantee the security of the information, in accordance with the standard Cobit 4.1. A Bank of questions for each component, was developed to obtain information necessary for the audit; This analysed to establish the degree of compliance with standards international and determine the maturity levels and the levels of risk of each of the components analyzed, in order to recommend actions to run to minimize the impact that these may cause to the information resource. Automating the process was developed for a web application, in which questions of surveys that were applied, are charged responses, and completion dates. The results of the analysis (findings, effects and recommendations) are entered in the application. This information will be used to monitor the progress of the audit. Tienen acceso a esta aplicación el auditor que es el encargado de ingresar la información a las bases de datos, y los usuarios a través de la dirección URL de la aplicación www.seguridadinformatica.esy.es/sitio4/index.php.