Análisis de riesgos de la plataforma web transaccional de la cooperativa de Ahorro y crédito Jardín Azuayo.

Abstract

The purpose of this work is to analyze the virtual environment of the Jardín Azuayo Savings and Credit Cooperative, applying the due process of continuous improvement, such as the Deming Cycle with the help of the ISO 27001 Standard, in order to implement actions that allow provide the necessary security to the personal / economic information of the numerous users that the entity owns and that thanks to the help of these necessary tools, the respective matrix is made where the risks, vulnerabilities and threats are identified which is exposed, to then define the recommendations that should be promoted in order to reduce those damages that are causing a huge damage to the reputation and economic stability of both the entity and the users. Given this situation the need arose to use direct observation as a research instrument, entering the Web Platform as a user to perform the respective tests; resulting in poor security controls; thereby significantly affecting the financial entity. Finally in the work the necessary security measures have been established to combat the different risks that are lurking in the use of the Platform.