GESTIÓN DE RIESGOS DEL ÁREA INFORMÁTICA DE LAS EMPRESAS EXPORTADORAS DE PESCA BLANCA DE MANTA Y JARAMIJÓ, COMO APORTE A LA CONTINUIDAD DEL NEGOCIO

Abstract

The constant technological advances and an increase in the amount of information generated, have contributed to an increase in the computer risks of the companies, causing in certain cases loss or alteration of information; therefore, it is necessary to protect it through adequate risk management through a standard or methodology that mitigates or minimizes the impact that this would have on the organization. For this reason, the objective of this paper is to obtain a computer risk management methodology for white fishing exporting companies in the cities of Manta and Jaramijó. For this, a survey was first conducted to determine the level of knowledge and application of risk management in the aforementioned companies. Additionally, international standards and methodologies for computerized risk management were selected based on previous works and a revised literature, which were evaluated comparatively by expert criteria, thus obtaining a new methodology for managing computer risks based on ISO 9001, ISO standards. 31000, ISO 27005 and ISO 27002, supported by the MAGERIT methodology and its PILAR tool, which will preserve the confidentiality, integrity and availability of information. The resulting methodology was evaluated in one of the companies under study, which allowed; manage risks, value assets, assess threats, determine safeguards.