Diseño de estrategias para la seguridad de las comunicaciones en el departamento de gestión de archivo audiovisual del Canal TRO sede Floridablanca.

Abstract

The present work is framed in the design of strategies for an A.13 communications security management system based on the ISO/IEC 27001:2013 standard for the Canal TRO network in Bucaramanga. We start by knowing the ISO/IEC 27001:2013 Annex A.13. which allows to take into account the new control objectives and different controls to be implemented, is of vital importance for a company that wants to maintain its business objective by controlling the risks of information loss that can affect from its public image to its finances. To apply the recommendations of Annex A.13, the company's assets were recognized following the MAGERIT V3 methodology, to determine the important resources, identifying the threats or attacks of which these assets may be victims, as well as an analysis of the risks to define the criteria for mitigating them. The development of risk analysis and management was carried out using the above mentioned methodology, which allows to define a spectrum of threats determining their importance, and then apply, according to the policy and the needs of the TRO Channel, a series of Safeguards that allow to mitigate, control or transfer the risk of the assets to be protected and comply with the recommendations of the ISO standard, taking into account as mentioned above that the decisions and recommendations of the selection criteria of such safeguards, obey entirely to those of the company to treat the risk. In this sense, it is proposed to use a domain server, for authentication of file management users, and network monitoring through SNMP, as one of the recommendations for compliance with section A13 of ISO/IEC 27001:2013. It was recommended after the vulnerability analysis, the application of safeguards such as an AD domain server, RADIUS server for WLAN authentication and SNMP monitoring using mikrotik's dude server.