Análisis de las metodologías de la auditoria informática para evaluar la seguridad digital en la Utmach.

Abstract

Today humanity is in the knowledge society, characterized by the benefits and facilities supported by digital media; however, there are risks parallel to its limitations such as data and information corruption, system failures, loss of access, among other damages of affecting institutions or companies interchangeably. Therefore, it is very important to have a protocol or regulation when auditing the security of computer systems with the goal of maintaining organizational performance in optimal conditions, developing competitiveness and avoiding possible external and internal attacks. The general objective of the present work is to analyze the computer audit methodologies to evaluate the digital security of the Technical University of Machala; the approach is exploratory and superficial based on bibliographic information about the processes when detecting vulnerabilities in contrast to the measures appreciated in the Utmach. The methodology applied is the comparative analysis when deciding criteria on the different ways of auditing an educational institution, diagnosing weaknesses, proposing controls and identifying methodological qualification best fits the requirements of the Utmach. The results explain the comparisons between audit processes, justify the choice of ISO standards as a security model and propose a series of steps for future implementation at the organizational level.