Propuesta de un plan de contingencia y de recuperación de desastres frente a los riesgos informáticos del Departamento de TIC de la Fuerza Aérea Ecuatoriana en la Base Mariscal Sucre

Abstract

The Ecuadorian Air Force at the Mariscal Sucre Base (FAEBMS), concerned about the security of your information, intends to improve it through the TIC department. Therefore, this work will focus on the TIC department of the FAEBMS, where an IT risk and natural disasters assessments was necessary to be conducted, to issue recommendations based on the MAGERIT methodology. The TIC department is a place where information and communication technologies are located, therefore, it is an environment with the greatest vulnerability to computer attacks and natural disasters, as there are valuable devices and information to protect. The assets and risks that were identified in the TIC department were done through the MAGERIT methodology, thanks to this it was possible to carry out the risk management analysis of the information systems and, elaborate a plan of contingency and disaster recovery considering each phase establishing controls to determine the action to transfer, eliminate, assume, or mitigate, reducing by 65% the threats, vulnerabilities, and computer risks in the TIC department of the FAEBMS. Subsequently, a cost / benefit analysis was done, and the results shown that the cost of the solution is less than the cost of the risk exposure, achieving a ROSI calculation percentage of 3680% in the information assets, taking into consideration that the implementation of the proposed solutions are feasible in 9 of the 11 assets with a high-risk level.