Extensión Cañar - Ingeniería de Sistemas
URI permanente para esta colecciónhttps://dspace.ucacue.edu.ec/handle/ucacue/12706
Examinar
Examinando Extensión Cañar - Ingeniería de Sistemas por Materia "amenazas"
Mostrando 1 - 2 de 2
- Resultados por página
- Opciones de ordenación
Ítem Acceso Abierto Guía de prevención de riesgos de ciberseguridad derivado del uso del internet y las redes sociales en niños y adolescentes del cantón Cañar(Universidad Católica de Cuenca campus Cañar, 2023) Narváez Ochoa, Fernanda Michaelle; Flores Urgilés, Cristhian Humberto; 0302358601Access to the internet and social platforms has significantly increased among young people and children worldwide, mainly using smartphones and other portable devices. However, this access is not exempt from dangers, such as inappropriate content, cyberbullying, blackmail, among others. This document proposes the development of a cybersecurity prevention guide for minors in the Cañar canton. As part of this process, a survey was conducted on digital security and its impact on the children in various schools of the urban center of the Cañar canton. Subsequently, a risk assessment was carried out using the MAGERIT methodology, following each phase to determine the most critical aspects in terms of privacy and security for young people, in addition to identifying the main vulnerabilities and threats they face on a daily basis. The findings showed that these young people are highly susceptible to the risks of the web and social networks. Based on this, a cybersecurity prevention handbook was designed for parents and education professionals to enable children and adolescents to develop skills and knowledge to navigate safely. Keywords: cybersecurity, MAGERIT methodology, digital threats, social networks.Ítem Acceso Abierto Propuesta para la Implementación de Sistemas de Gestión de Riesgos de TI para la Cooperativa Yuyay Ltda(Universidad Católica de Cuenca campus Cañar, 2024) Yupa Chimbo, Verónica Janeth; Carrillo Zenteno, Jose Antonio; 0350152534This thesis proposes the implementation of an IT Risk Management System in the YUYAY Ltda. savings and loan union to strengthen information security and ensure the operational continuity of the cooperative in an increasingly digitized environment. Through a solid theoretical framework, the critical concepts of IT risk management are identified, and the current state of the information systems and the technological infrastructure of the cooperative is also diagnosed. The methodology used in this research follows a mixed approach, combining both qualitative and quantitative analysis. Information is collected through key personnel interviews, and risk analysis matrices are used to assess vulnerabilities and threats affecting critical assets. Subsequently, mitigation strategies are designed based on the principles of the ISO 31000 standard, proposing security controls, incident response plans, and recommendations for continuous risk monitoring. The thesis aims to provide a comprehensive solution that allows the cooperative to efficiently manage its technological risks, guaranteeing the protection of its information assets and maintaining alignment with its strategic objectives. It ensures the integrity, confidentiality, and availability of the systems, strengthening the ability to face security incidents and safeguard the operation. Keywords: assets, ISO 31000, risk management, threats
