Gestión de riesgos de los canales electrónicos de la Cooperativa Yuyay Ltda basado en normas y estándares internacionales

Abstract

This research proposes the implementation of an IT risk management model focused on the electronic channels of the ‘Yuyay’ Savings and Credit Cooperative Ltd., aiming to protect information and ensure operational continuity in an increasingly digital environment. To this end, the key concepts of IT risk management were examined, and the current state of information systems and technological infrastructure was analyzed. The methodology adopted a mixed approach, combining qualitative and quantitative analyses. Data were collected through interviews with the head of IT and the application of risk matrices based on MAGERIT to identify vulnerabilities and threats to critical assets. Based on this diagnosis, mitigation strategies aligned with the ISO/IEC 2700:2022 standard were proposed, reorganizing controls into four dimensions (Organizational, People, Physical, and Technological), and including security measures, incident response plans, and recommendations for continuous monitoring.