Auditoria informática a la infraestructura tecnológica de la “Unidad Educativa Dr. José María Velasco Ibarra”.

Abstract

In the IT field, audits have become essential due to the difficulty that many organizations face in maintaining control and ensuring that large volumes of data and assets are in perfect order and without vulnerabilities. For this reason, it was considered necessary to carry out a computer audit in the “Dr. José María Velasco Ibarra”. As a research method, a quantitative approach was used and an audit was carried out using the Magerit methodology. To determine the sample, 24 people from the institution were selected, including the Rector, Vice Rector, Inspector, secretary and other teachers. As part of the development of the computer audit, both logical and physical, the Magerit methodology was used to facilitate the analysis and identify the risks and vulnerabilities present in the information systems and laboratory infrastructure. A risk estimation table was implemented to identify dangers after evaluating vulnerabilities in the computer laboratory, obtaining the following results: the risk of theft has a 40% probability and is considered appreciable; damage to equipment has a 68% probability and is considered very serious; the risk of fire has a 57% probability and is considered important; the risk of malware has a 72% probability and is considered very serious; and phishing has an 88% probability and is also considered very serious. Beforehand, it is recommended to follow the good practices guide that was implemented to improve the use of the laboratory.