Diseño e implementación de un marco de gestión de riesgos y respaldo para automatizaciones en fw ingeniería

Abstract

This thesis presents the design and implementation of a Risk and Backup Management Framework for automations in the Security Operations Center (SOC) of the company FW Ingeniería, with the objective of improving the reliability, traceability and security of automated processes. First, a diagnosis of the current automation process was carried out, identifying weaknesses such as the absence of formal backups, lack of structured validation and limited documentation of changes. Subsequently, technical and operational risks were identified and classified using a quantitative matrix based on probability and impact, prioritizing those categorized as high and critical. Based on these results, a methodological framework was designed, structured in phases of risk analysis, initial backup, testing in a controlled environment, deployment in production, validation and continuous improvement, integrating good practices from ITIL, the ISO/IEC 27005:2018 standard and the Scrum agile methodology. Finally, the pilot implementation showed a significant reduction in report errors, failures without backup and operational rework within the SOC.