Análisis y Gestión de requerimientos para un Sistema de Gestión de Riesgos en seguridad informática.

Abstract

In the extensive analysis of an organization's digital data, the question of how to identify, monitor and control computer risks has constantly remained, for this reason, measures are sought to ensure the confidentiality, availability and integrity of data. and avoid threats such as malware, denial of service, and other intrusions. For this reason, having knowledge of the management of the risk management system based on appropriating the ISO 27001, ISO 27002 standards and best practices, is beneficial for the information security of companies. The objective of this proposal is to collect information from a risk management system in computer security, since, by having an adequate investigation of risks, it will avoid failures of a system that can harm or allow intruders to enter, it will also serve as a guide. to mitigate the impact of different risks. It is intended to have the bases for a future development of free software that allows the registration and monitoring of risks that may arise in small and medium-sized companies.