Implementación de un modelo para el manejo de riesgos de ti de las pequeñas y medianas empresas en la ciudad de Loja, utilizando un modelo de gobernanza de ti

Abstract

Abstract: The incorporation of ICT in companies is considered as an element that increases their competitiveness through greater productivity, efficiency andprofitability of investment. But its effect depends on the characteristics of the technology, the conditions of the environment, as well as the internal capacities of the organization. In the present work, it is analyzed for the implementation of a model for IT risk management of small and medium-sized companies, using an IT governance model, through the methodologies that best adapt to what is required and that ensure the profitability of the organization. All companies are subject to inherent risks, inherent to their nature of operation, for this reason it is important to analyze and investigate the best tools to manage a correct methodology, which allows creating risk prevention strategies and problem-solving strategies. To fulfill the objective of this work, it is necessary to design a model that incorporates the principles of IT governance and risk prevention methodologies to be implemented in an SME. The best way to channel an IT governance system and a risk prevention methodology is through an instruction manual that stipulates the steps that an SME must follow for the correct implementation of the systems described above, said manual must be adaptable to the different types of businesses existing in the city of Loja, that is, with an emphasis on general commerce, agriculture, and tourism in general.