METODOLOGÍA PARA LA REALIZACIÓN DE AUDITORÍAS DE SEGURIDAD INFORMÁTICA DE INFRAESTRUCTURA DE REDES DE DATOS EN EMPRESAS DEL SECTOR INDUSTRIAL PESQUERO (UN ESTUDIO COMPARATIVO): DEL CANTÓN MANTA, PROVINCIA DE MANABÍ, ECUADOR.

Abstract

Information is one of the most significant assets of an organization. Due to the threats and risks to which IT assets are exposed in organizations, it becomes very important to have control and supervision tools that help to create a culture of security in these, that reveal the state of Security Computing. The objective of this research work is to determine the most suitable methodology for carrying out computer security audits to the data network infrastructure in the companies of the fishing industry of the Manta municipality. Through a literature review, statistical models and a comparative analysis between different methodologies, and with the help of a validated questionnaire, the most appropriate methodology was evaluated to carry out this audit process to guarantee the reliability, availability, confidentiality, and integrity of information; as well as minimizing the risks in the use of technology. As a result, the deficiencies in the computer security of the studied object were evidenced and it could be corroborated that the alternative more in line with the characteristics of the sector is OSSTMM, due to its medium complexity and easy implementation in those organizations that initiate restructuring processes of the models of computer security. This subject, as a line of research, has received the attention of researchers, observing the need to deepen its study, justifying its relevance and relevance.