AUDITORÍA DE SEGURIDAD EN EL PROCESO DE DESARROLLO DE SOFTWARE ACORDE A ESTÁNDAR ISO/IEC 15504 EN UNA INSTITUCIÓN FINANCIERA.

Abstract

The investigation originates as a response to the lack of assurance of computer processes in certain financial institutions. The objective was to design and implement a security audit in the software development process according to ISO / IEC 15504 standards at a financial institution. The applied methodology assumed a mixed approach and instruments such as: survey about the software development process, interview with the coordinator of the software development process, and a checklist. The results allowed to observe that most of the sub-processes are fully implemented; only a small number would be partially implemented. Based on this, the audited process is concluded in a consistent manner and under clearly defined parameters and guidelines. The application of the computer security audit to the software development process made it possible to identify several problems that, if not solved, put at risk the operation of the computer systems and, mainly, the security of the clients and partners during the transactions. economic