Implementación de pruebas de hackeo ético para evaluar el sistema de seguridad informática en la empresa Rhelec Ingeniería Cía Ltda.

Abstract

Rhelec Ingeniería, is a company that provides assistance in the field of Telecommunications, Electrical Engineering, and Construction services, meeting quality requirements with its users and with the applicable regulations allowed in terms of safety, health and environment. Currently this company does not apply any security strategy for the management of information in its technological infrastructure. Considering, the high use of its network services, as well as the intense information management in its different areas, it is necessary to design and apply penetration tests, aiming to accurately diagnose the security status of the company through authorized and controlled attack tests to detect vulnerabilities that seek to exploit the weaknesses perceived in the organization's visible baseline. To complement the tests carried out, strategies such as security policies, reinforcement of hardening devices will be defined, with the respective activities and procedures necessary to ensure that the resources with their respective information assets are protected.