Auditoría de seguridad informática para infraestructura tecnológica en la Unidad Educativa Antonio José de Sucre en el periodo 2022.

Abstract

This research project is an audit of Computer Security for the technological infrastructure in the Antonio José de Sucre Educational Unit. The main objective was to prepare an audit report where compliance with security standards of the technological infrastructure owned by the institution was evaluated and verified. A diagnosis was made in the institution to identify the problem, the techniques used for the investigation were the survey and the interview, being fundamental tools for the collection of information, for this, 18 teachers who work in the institution and the highest authority of the educational establishment the rector Ing. Luis Arteaga and General Inspector Lic. Mónica Andrea Mejía Guerrero. Mgs. The proposal consisted of a physical security audit of the computer laboratory, the methodology used was MAGERIT, through which certain steps could be carried out more easily, such as defining assets and threats, instrument design, tabulation, analysis of risk and risk matrix. As relevant results, it was obtained that the security level is 43%, finding that the main vulnerabilities were exposure to: risk 1 of information theft with a 95% risk level, risk 2 of viruses with 83% high level, The other risks were theft, fire, equipment damage, and flooding. Their results were low. Finally, the audit report and a recommendation guide that has steps to take into account to prevent said computer security risks were prepared.