Propuesta para la gestión de continuidad del negocio en el ámbito de TI para EMMAIPC-EP del cantón Cañar, basado en la norma ISO 22301

Abstract

This thesis addresses business continuity management in the IT department of EMMAIPC-EP, focusing on ensuring operational resilience in the event of possible disruptions. The specific objectives include diagnosing the current state of IT infrastructure and business continuity practices, developing an IT risk management framework that identifies and prioritizes threats, and designing an action plan for implementing practical, scalable, and sustainable disaster recovery and business continuity strategies. The methodology used was descriptive and evaluative, combining qualitative analysis of the current situation with a quantitative approach to measure the impact of the identified risks. A comprehensive diagnosis of the IT infrastructure and current management practices was conducted through surveys and interviews with key personnel, which helped identify critical deficiencies in the preparedness for operational continuity. Based on these findings, an IT risk management framework aligned with international standards was developed, and a specific action plan was designed, including scalable and sustainable recovery strategies. The results of this investigation provide EMMAIPC-EP with a solid foundation to strengthen its incident response capabilities, ensuring the continuity of its critical operations and protecting its most valuable assets in crises. Keywords: business continuity, risk management, IT infrastructure.