Análisis y plan de tratamiento de riesgos para los activos de información del cuerpo de bomberos voluntarios de Tunja

Abstract

Organizations generally receive information through different sources that may become internal or external, which must be subject to classification and provision in relation to their purpose, so that in a consolidated manner it facilitates decision-making and may be available at moment that is required. As a result of the above, it is recommended that measures be taken regarding the use, management and availability of information, as this is “a valuable asset on which the proper functioning of an organization depends”, as well as strategic aspects that manage the management operation of them. Therefore, this research intends to carry out a differential analysis and the risk treatment plan for the information assets of the Tunja Volunteer Fire Department, within the framework of the generally accepted principles of internal control, considering criteria for the analysis of the risk management contemplated in the ISO 27001 standard of Information Technology, security techniques and information security management systems and the MAGERIT methodology, so that the entity is offered tools for the identification and treatment of risks inherent in the information, guaranteeing a safe environment for internal and external users.