Citas bibligráficas
Montalván, V., Ruiz, R. (2024). Análisis de riesgos en la infraestructura informática de la oficina de tecnologías de la información y comunicaciones de la municipalidad distrital de belén 2023 [Tesis, Universidad Científica del Perú]. http://hdl.handle.net/20.500.14503/3119
Montalván, V., Ruiz, R. Análisis de riesgos en la infraestructura informática de la oficina de tecnologías de la información y comunicaciones de la municipalidad distrital de belén 2023 [Tesis]. PE: Universidad Científica del Perú; 2024. http://hdl.handle.net/20.500.14503/3119
@misc{renati/1059832,
title = "Análisis de riesgos en la infraestructura informática de la oficina de tecnologías de la información y comunicaciones de la municipalidad distrital de belén 2023",
author = "Ruiz Vílchez, Rodolfo",
publisher = "Universidad Científica del Perú",
year = "2024"
}
In this thesis, the District Municipality of Belén is shown facing significant challenges related to the security of its IT infrastructure, due to the increasing interconnection and dependence on information technologies in its operations. This situation is exacerbated by the lack of a comprehensive risk assessment of its IT infrastructure. The main objective of the study is to conduct such an assessment to ensure the proper protection of the information managed by the municipality. To achieve this goal, three specific objectives were established: to assess risks, to evaluate vulnerabilities, and to assess the effectiveness of security controls in the IT infrastructure. The methodology used combines descriptive and exploratory approaches, as well as quantitative and qualitative methods. Data collection techniques such as structured surveys, analysis of past incident records, and qualitative and quantitative risk assessments were employed. The results obtained revealed specific deficiencies in the IT infrastructure th at could compromise the confidentiality, integrity, and availability of the municipality's information. Different types of incidents and vulnerabilities were identified, as well as a variable percentage of implementation and updating of security controls. Additionally, the average response and mitigation time for security incidents were determined.
Este ítem está sujeto a una licencia Creative Commons Licencia Creative Commons