Sistematización del fortalecimiento de la seguridad informática mediante controles de ciberseguridad y gestión de identidades en Colsubsidio

Abstract

This monograph examines the strengthening of IT security at Colsubsidio based on the cybersecurity controls and identity management implemented by the IT Security Department within the Technology Division during the internship period from July 15, 2025, to January 14, 2026. The study takes a descriptive, case-study approach and is based on the review of evidence generated by specialized tools such as Azure Entra ID, Qualys, CrowdStrike, and SAP, as well as access matrices, connectivity inventories, and reports for the fiscal audit. The cybersecurity component analyzes identity monitoring controls in the cloud through multi-factor authentication and conditional access, vulnerability management across twenty-four web portals, and the response to security alerts on endpoints, along with periodic verification of IP addresses against blacklists to preserve the availability and reputation of technology services. The identity management component examines the processes for reviewing non-generic users, the removal of over 1,000 obsolete roles in SAP, and the monthly monitoring of 113 critical transactions, all aimed at reinforcing the principle of least privilege and the segregation of duties in ERP systems and associated applications. The results demonstrate improved traceability of privileged access, greater visibility into vulnerabilities, and a consolidation of the evidence required by internal audit and statutory audit, showing that the integration of IAM, vulnerability management, and network security constitutes a fundamental pillar for protecting the organization’s technological assets. Furthermore, the systematization of this experience provides a practical framework for the implementation and monitoring of information security controls in complex corporate environments.