Citas bibligráficas
Esta es una referencia generada automáticamente. Modifíquela de ser necesario
Ruiz, J., Sánchez (2024). Análisis del nivel de seguridad informática del hospital César Garayar García Iquitos-2023 [Tesis, Universidad Científica del Perú]. http://hdl.handle.net/20.500.14503/3120
Ruiz, J., Sánchez Análisis del nivel de seguridad informática del hospital César Garayar García Iquitos-2023 [Tesis]. PE: Universidad Científica del Perú; 2024. http://hdl.handle.net/20.500.14503/3120
@misc{renati/1051923,
title = "Análisis del nivel de seguridad informática del hospital César Garayar García Iquitos-2023",
author = "Sánchez Rios Jorge Junior",
publisher = "Universidad Científica del Perú",
year = "2024"
}
Título: Análisis del nivel de seguridad informática del hospital César Garayar García Iquitos-2023
Autor(es): Ruiz Cáceres, Juan Arturo; Sánchez Rios Jorge Junior
Asesor(es): Melchor Infantes, Ronald Percy
Palabras clave: Seguridad; Informática; Hospital; Security; Information technology; Hospital
Campo OCDE: https://purl.org/pe-repo/ocde/ford#1.02.02
Fecha de publicación: 9-may-2024
Institución: Universidad Científica del Perú
Resumen: La investigación realizada en el Hospital César Garayar García en Iquitos en el año 2023 se enmarca en un enfoque descriptivo y evaluativo. Se ha utilizado el enfoque descriptivo para comprender y describir el estado actual de la seguridad informática en el hospital, y el enfoque evaluativo se ha aplicado para analizar y evaluar el nivel de seguridad informática existente en la institución. Para llevar a cabo esta investigación, se recopilaron datos, se realizaron evaluaciones de vulnerabilidades y se analizaron las políticas y prácticas de seguridad, el diseño de la investigación se clasifica como un estudio de caso, ya que se centra en un caso específico, que es el Hospital César Garayar García en Iquitos. Se ha realizado un análisis detallado y profundo de la entidad, centrándose en la evaluación de la seguridad informática en el hospital, la población de estudio incluyó todos los sistemas informáticos, dispositivos, políticas de seguridad y personal relacionado con la seguridad informática en el Hospital César Garayar García en Iquitos en el año 2023. La muestra se compuso de una variedad de activos de hardware y software, así como personal relacionado con la seguridad informática, las técnicas de recolección de datos utilizadas incluyeron observación, entrevistas y auditorías de seguridad. Los instrumentos de recolección de datos consistieron en fichas de observación, cuestionarios y una matriz de riesgo para evaluar los activos de información. Se detalla el procedimiento de recolección de datos para cada técnica, el procesamiento y análisis de datos se realizaron utilizando software estadístico SPSS Versión 22, y los resultados se presentaron en forma de cuadros y gráficos estadísticos, los resultados se dividieron en varias dimensiones y se discutieron en detalle, Evaluación del Hardware: Se evaluó el estado actual de los activos de hardware del hospital, y la mayoría se encontró en buen estado, aunque algunos equipos de escritorio y otros elementos se clasificaron como regulares, necesidades de Hardware: Se identificaron equipos de hardware necesarios para mejorar la infraestructura tecnológica y la comunicación en el hospital, como un firewall, un switch Core y servidores de telefonía IP, posibles Vulnerabilidades del Software: Se señalaron posibles vulnerabilidades en los sistemas informáticos utilizados en el hospital, como el acceso no autorizado y vulnerabilidades en el software, Matriz de Riesgo de Activos de Información: Se elaboró una matriz de riesgo que clasifica
los activos de información en función de su importancia, vulnerabilidad y riesgo, resaltando la necesidad de proteger activos críticos, se concluyó que la evaluación del hardware muestra que la mayoría de los activos de hardware están en buen estado, pero se deben abordar los elementos clasificados como regulares, se identificaron las necesidades de hardware necesarias para mejorar la infraestructura tecnológica del hospital, se destacó la importancia de identificar y mitigar posibles vulnerabilidades en los sistemas informáticos, la matriz de riesgo subrayó la importancia de priorizar la seguridad de activos críticos y tomar medidas adecuadas para protegerlos, se formularon recomendaciones específicas, como implementar un programa de mantenimiento preventivo y correctivo, adquirir activos de hardware necesarios, fortalecer la seguridad de software y priorizar la seguridad de activos críticos, estas recomendaciones buscan mejorar la seguridad informática en el Hospital César Garayar García y garantizar la protección de datos sensibles y la eficiencia operativa en la institución.
The research conducted at the César Garayar García Hospital in Iquitos in the year 2023 is framed within a descriptive and evaluative approach. The descriptive approach was used to understand and describe the current state of information security at the hospital, and the evaluative approach was applied to analyze and evaluate the existing level of information security within the institution. To carry out this research, data was collected, vulnerability assessments were conducted, and security policies and practices were analyzed, the research design is categorized as a case study, as it focuses on a specific case, which is the César Garayar García Hospital in Iquitos. A detailed and in-depth analysis of the entity has been conducted, with a focus on evaluating information security at the hospital, the study population included all computer systems, devices, security policies, and personnel related to information security at the César Garayar García Hospital in Iquitos in the year 2023. The sample was composed of a variety of hardware and software assets, as well as personnel related to information security, data collection techniques used included observation, interviews, and security audits. Data collection instruments consisted of observation sheets, questionnaires, and a risk matrix to assess information assets. The data collection procedure for each technique is detailed, data processing and analysis were carried out using statistical software SPSS Version 22, and the results were presented in the form of statistical tables and graphs, the results were divided into several dimensions and discussed in detail: Hardware Assessment: The current state of the hospital's hardware assets was evaluated, and the majority were found to be in good condition, although some desktop computers and other elements were classified as regular, Hardware Needs: Necessary hardware equipment was identified to improve the hospital's technological infrastructure and communication, such as a firewall, a Core switch, and IP telephone servers, Potential Software Vulnerabilities: Potential vulnerabilities in the computer systems used at the hospital were identified, such as unauthorized access and software vulnerabilities, Information Asset Risk Matrix: A risk matrix was developed to classify information assets based on their importance, vulnerability, and risk, emphasizing the need to protect critical assets, it was concluded that the hardware assessment shows that most hardware assets are in good condition, but the items classified as regular need to be addressed. The identified hardware needs are essential to enhance the hospital's technological xiv infrastructure, The importance of identifying and mitigating potential vulnerabilities in computer systems was highlighted. The risk matrix emphasized the need to prioritize the security of critical assets and take appropriate measures to protect them, specific recommendations were formulated, such as implementing a preventive and corrective maintenance program, acquiring necessary hardware assets, strengthening software security, and prioritizing the security of critical assets. These recommendations aim to improve information security at the César Garayar García Hospital and ensure the protection of sensitive data and operational efficiency within the institution.
The research conducted at the César Garayar García Hospital in Iquitos in the year 2023 is framed within a descriptive and evaluative approach. The descriptive approach was used to understand and describe the current state of information security at the hospital, and the evaluative approach was applied to analyze and evaluate the existing level of information security within the institution. To carry out this research, data was collected, vulnerability assessments were conducted, and security policies and practices were analyzed, the research design is categorized as a case study, as it focuses on a specific case, which is the César Garayar García Hospital in Iquitos. A detailed and in-depth analysis of the entity has been conducted, with a focus on evaluating information security at the hospital, the study population included all computer systems, devices, security policies, and personnel related to information security at the César Garayar García Hospital in Iquitos in the year 2023. The sample was composed of a variety of hardware and software assets, as well as personnel related to information security, data collection techniques used included observation, interviews, and security audits. Data collection instruments consisted of observation sheets, questionnaires, and a risk matrix to assess information assets. The data collection procedure for each technique is detailed, data processing and analysis were carried out using statistical software SPSS Version 22, and the results were presented in the form of statistical tables and graphs, the results were divided into several dimensions and discussed in detail: Hardware Assessment: The current state of the hospital's hardware assets was evaluated, and the majority were found to be in good condition, although some desktop computers and other elements were classified as regular, Hardware Needs: Necessary hardware equipment was identified to improve the hospital's technological infrastructure and communication, such as a firewall, a Core switch, and IP telephone servers, Potential Software Vulnerabilities: Potential vulnerabilities in the computer systems used at the hospital were identified, such as unauthorized access and software vulnerabilities, Information Asset Risk Matrix: A risk matrix was developed to classify information assets based on their importance, vulnerability, and risk, emphasizing the need to protect critical assets, it was concluded that the hardware assessment shows that most hardware assets are in good condition, but the items classified as regular need to be addressed. The identified hardware needs are essential to enhance the hospital's technological xiv infrastructure, The importance of identifying and mitigating potential vulnerabilities in computer systems was highlighted. The risk matrix emphasized the need to prioritize the security of critical assets and take appropriate measures to protect them, specific recommendations were formulated, such as implementing a preventive and corrective maintenance program, acquiring necessary hardware assets, strengthening software security, and prioritizing the security of critical assets. These recommendations aim to improve information security at the César Garayar García Hospital and ensure the protection of sensitive data and operational efficiency within the institution.
Enlace al repositorio: http://hdl.handle.net/20.500.14503/3120
Disciplina académico-profesional: Sistemas de Información; Ingeniería de Informática y de Sistemas
Institución que otorga el grado o título: Universidad Científica del Perú. Facultad de Ciencias e Ingeniería
Grado o título: Ingeniero de Sistemas de Información; Ingeniero Informático y de Sistemas
Jurado: Ramírez Villacorta, Jimmy Max; Marthans Ruiz, Carlos Enrique; Bardales Lozano, Tonny Eduardo
Fecha de registro: 27-dic-2024
Este ítem está sujeto a una licencia Creative Commons Licencia Creative Commons