Determinación del Nivel de Seguridad de los Sistemas de Información de la Alcaldía Mayor de Tunja

Abstract

In what was done within the degree work in the internship mode, the security levels of the Tusig information systems and the Tax Portal of the Greater Mayor's Office of Tunja were determined through instruments and methodologies for measuring risk and security levels. such as STRIDE, OWASP and CVE, through which the findings and vulnerabilities are determined for each of the specific information systems according to the methodology designed by the author of the work. This work is related to that established by the MinTIC in each of decrees such as 1078 of 2015, Online Government, Privacy Model and Information Security, in order to obtain a greater veracity in the results. Finally, each of the stages is detailed from the recognition of the information systems and the findings of the same, as well as the objectives of the degree work such as the identification of the characteristics of the information systems, for the establishment of your level of relevance and vulnerability in the organization; the determination of security classification matrices for information systems through safety measurement methodologies, for the determination of their level of risk; design and implementation of a plan of recommendations for the vulnerabilities of the information systems.