Citas bibligráficas
García, J., Huamani, S. (2019). Modelo de gestión de riesgos de seguridad de la información para pymes en el Perú [Tesis, Universidad Peruana de Ciencias Aplicadas (UPC)]. http://hdl.handle.net/10757/625905
García, J., Huamani, S. Modelo de gestión de riesgos de seguridad de la información para pymes en el Perú [Tesis]. PE: Universidad Peruana de Ciencias Aplicadas (UPC); 2019. http://hdl.handle.net/10757/625905
@misc{renati/368606,
title = "Modelo de gestión de riesgos de seguridad de la información para pymes en el Perú",
author = "Huamani Pastor, Sarita Cecilia",
publisher = "Universidad Peruana de Ciencias Aplicadas (UPC)",
year = "2019"
}
Nowadays, every company should be aware of the importance and the way business information should be treated since it is one of their most important assets. Unfortunately, not all are sure about their actual value, and so, they may be exposed to large losses. According to EY, 41% of companies consider that they have minimum probabilities to detect a sophisticated attack. The main reason that hinders the effectiveness of information security is due to budgetary restrictions and the lack of specialized resources. To protect the information, companies must determine their risk exposure, for which it’s advisable to use methodologies, reference frameworks or standards for information security risk analysis. This project consists on implementing an information security risk management model for SMEs, integrating the OCTAVE-S methodology and the ISO/IEC 27005 standard. This covers the analysis of methodologies and risk management standards, the design of the information security risk management model, the validation of the model in a SME in the sales process. This integration provides a timely and effective identification of the risks of the qualitative approach and makes it possible to take advantage of the values identified for the assets of the quantitative approach. Furthermore, this allows identifying the main information security risks by rating and treating them according to the needs of the company. It’s expected that this model will help in the management of information security risks within SMEs, in order to reduce the impact of risks to which they may be exposed.
Este ítem está sujeto a una licencia Creative Commons Licencia Creative Commons