Propuesta de un plan de contingencia para salvaguardar los activos de información en el Departamento de tecnología de información y comunicación de la Empresa Pública Municipal de residuos sólidos Rumiñahui-Aseo EPM empleando la metodología Magerit

Abstract

Companies may be affected by threats that cause loss and damage to information assets, directly undermining business continuity for which the “Empresa Pública Municipal de Residuos Sólidos Rumiñahui Aseo” required an analysis of their information risks. This project was using the MAGERIT Methodology for Risk Analysis and Management that identified the most important assets of the technology department, as well as risks and threats to which they may be exposed, to recommend the implementation of safeguards. With the help of the PILAR tool, which was mainly used by MAGERIT, the assets were identified to carry out the risk analysis, the critical assets were listed, as well as their threats and safeguards, an assessment of these was carried out to identify the risk and impact that they can cause if threats materialize. Finally, the critical assets were evidenced, a security plan was elaborated containing an execution plan and a security policy. That was evidenced that out of twenty critical assets, 90% reduced to minimum´s impact and the remaining ones lowered their risk level.