PROPUESTA DE UN MODELO DE EVALUACIÓN DE RIESGOS BASADO EN LAS PRUEBAS DE PENETRACIÓN EN UNA ENTIDAD FINANCIERA.

Abstract

In the present investigation, a risk assessment model related to good practices was proposed, based on the penetration tests applied in a Financial Entity, in order to identify security breaches and demonstrate the reliability or vulnerability of current mechanisms they are used in said industry, for the appreciation of the detected risks. Through field research on security in financial institutions, application of focus groups, and development of black box penetration tests in the Financial Entity under study, for the identification, analysis and evaluation of risks in sequence of the proposed model; because, from its use it allowed to establish the most important factors that influence, and the results based on a comparison with the theory given and linked with the best practices, in addition, it was determined that in the present case study there is no adequate level of security in its services and applications where high-level threats were presented that must be dealt with in a timely manner, with the use of mechanisms that provide solutions to the entity and protect its assets at the level of confidentiality, integrity and availability.