Propuesta de manual de política de seguridad de la información para la Cooperativa de Ahorro y Crédito Achik Inti Ltda, del cantón Cañar

Abstract

Achik Inti Savings and Credit Cooperative has played a key role in providing financial solutions throughout the Cañar canton and has proactively adapted to emerging competencies and the implementation of innovative projects. However, the lack of IT security protocols in the entity poses challenges, making it susceptible to unauthorized interventions. This project is oriented to the elaboration of an "IT SECURITY STANDARDS SCHEME FOR THE COOPERATIVE OF SAVINGS AND CREDIT ACHIK INTI LTDA, IN THE CANTON CAÑAR". To strengthen the structure of this research, the guidelines of ISO 27001:2013 and the recommendations of ISO 27002 were used. These frameworks were used to define and implement measures to ensure the confidentiality of information. A threat assessment was carried out using the MAGERIT methodology, which made it possible to detect and assess the assets in the Information and Communication Technologies (ICT) department. After this assessment, the technological risks associated with vulnerabilities were identified and the necessary controls to mitigate them were determined. Keywords: technological risks, MAGERIT, ICT, ISO 27001