Evaluación del riesgo en una red de investigación de tecnología avanzada bajo la metodología PMI y la serie ISO/IEC 27000

Abstract

The present work was based on the diagnosis and evaluation of information risks in an Advanced Technology Research Network under the PMI 2017 methodology and the ISO/IEC 27000 series, determining the set of information assets and vulnerabilities, threats and causes that can affect this dependency causing information leakage and loss that can be recurring in the operation of the dependency. Likewise, the likelihood and impact that this risk would have on the development of RITA’s functions and its members were reflected, generating different measures or treatments to avoid the appearance of new information risks and to help mitigate or resolve the current risks in the dependency. This was done due to the need of RITA to strengthen information security, ensuring its reliability, integrity and availability, allowing an adequate provision of services and functionality of the unit, aligned with the information security regulations and policy of the Universidad Distrital Francisco José de Caldas.