Análisis de riesgo y diseño de plan de contingencia para recuperación ante desastres en Florida Education Institute (FL-USA) según la norma ISO 24762-2008

Abstract

In the business world as in that of any organization or entity, which handle vital information of their clients face several problems related to the technological area, especially when it comes to storing, securing and recovering all the data after various scenarios such as an attack or misuse of computer equipment, obsolescence in servers and even natural catastrophes that can harm and damage the entire infrastructure established in the institution, which leads to the loss of information, which harms the business chain, making daily activities an ordeal for users. To deal with these problems, it is vitally important to have a contingency plan that allows you to be prepared for any eventuality that can cause great damage within any organization and to be aware of everything that can happen at the level of natural disasters or direct attacks on information of the companies. That is why the Florida Education Institute (FEI) has allowed the creation of a contingency plan for its information technology area, where the risks and shortcomings within this department were evaluated and the necessary corrective measures were taken to avoid any type of problem in the future. The ISO 24762-2008 standard was used, because it takes into account aspects such as the use of services from other companies that provide computer solutions to FEI, with which it was evaluated if everything works correctly and if there are the corresponding guarantees to operate with these external tools. At the end of the project, a contingency plan was obtained tailored to the requirements and observations obtained from FEI, with which the institution can be prepared for most risks that may exist and have the knowledge of what to do in the face of these problems and solve them in a timely manner fast and efficient way.