MARCO DE REFERENCIA DE BUENAS PRÁCTICAS PARA EL CUMPLIMIENTO DE LA NORMATIVA SBS-JB-3066 Y SU MEDICIÓN DEL IMPACTO

Abstract

Information technology is the tool that offers organizations support for the demand for new products and financial services for their clients. Currently, the trend of a new digital age has generated that customers make transactions through different electronic channels, increasing in turn potential risks that could affect the security of information. The present article develops a framework of good practices regarding technological governance, business continuity, security in electronic channels, operational risk management and information security that should be implemented by the country's financial institutions governed by the Superintendence of Banks. For the purpose, local and international regulations and good practices were reviewed to develop a framework with the minimum necessary security measures that should be implemented in the internal control system of the institutions in order to minimize threats and risks related to the security, integrity and availability of your information. Finally, a measurement of these good practices applied to a financial institution is presented, determining minimum requirements and findings that said institution must take before the on-site visit by the control entity.