Análisis de riesgos del sistema de gestión académica Danta basado en la norma ISO 17799 Seguridad de la información y diseño de un manual de seguridad

Abstract

The information used today is exposed to various risks of enormous magnitude, such as: theft of confidential data, manipulation, among others, that cause loss of productivity, high recovery costs and diminish the image and credibility of companies in the market, In this context, computer security, which consists not only in the use of devices such as a firewall or antivirus, but also in protecting the information in such a way that it can meet objectives such as availability, integrity and confidentiality of data . The dependence of organizations on information systems and services indicates that they are more vulnerable to threats concerning security; Such as the Technical University Particular de Loja, which has information systems that support the key business functions and are exposed to changes such as: increase in the number of users who use the applications, users who constantly change More information, different types of technology and platforms, which together make it difficult to protect, and generates different types of vulnerabilities related to information security.