Evaluación del Nivel del Riesgo en Seguridad de la Información para las Secretarias de Planeación e Infraestructura de la Alcaldía de Tunja A Través de la Metodología Stride / Dread

Abstract

In the town hall of Tunja in the areas of infrastructure and planning where processes of vital importance are carried out for the Tunjana community, but does not have an assessment of the level of risk for any of its áreas, in which you can not determine the vulnerabilities of each equipment (computers), that is why the need arises to perform the risk assessment for the areas of planning and infrastructure in order to have a safety diagnosis, using the STRIDE / DREAD methodology where an identification of the vulnerabilities is made and then a risk measurement of each one of them. In it, statistical data were obtained that provide us with the current state of information security where the data is strong supported by the resumes of each team and in general of each unit evaluated. Generating recommendations and immediate actions to be executed, in order to reduce the insecurity indexes in the areas evaluated.