Abstract

DE FREITAS, Vidalina. Analysis and Risk Assessment of Information: Case Study Universidad Simon Bolivar. Enlace [online]. 2009, vol.6, n.1, pp.43-55. ISSN 1690-7515.

Nowadays, organizations, with all their technological advances and complex information processes, face many threats that, in most cases, exploit their vulnerabilities. The Simón Bolívar University, located in Caracas, doesn’t escape from this reality. The objective of this work is knowing the strengths and weaknesses to which they may be subject information assets that are in custody at the Directorate of Telematics Services (DST) of the Simón Bolívar University, in order to suggest strategies to minimize the occurrence of possible events. This methodology uses a case study that allows you to gather detailed information with a variety of systems for collecting data for a given period. Among the data collection methods are used semi-structured, structured and in-depth review of the literature and archaeological sources. Similarly, visits were made to the facilities and reviewed aspects of physical security under the ISO-27001: 2007. The conclusion is that each element in the custody of the DST is of paramount importance to the University, are thus suggested implementing some controls in the ISO, for each of those assets.

Keywords : ISO-27001:2007; Information Security; Analysis and Assessment of Risks; Asset Information.