Plan de contingencia informático para el área de TI en base a la norma de calidad ISO 27001:2013 para la Fundación Cultural y Educativa Ambato - Unidad Educativa Atenas

Abstract

ABTRACT A computer contingency plan is a set of activities that allow us to carry out actions to minimize risks in the event of a disaster of natural or human origin, keeping the operation of the activities at a minimum level until recovering all the systems and resources, At present, the information of any company or institution is a priority, together with the computer processes and systems which are considered as its most important assets, and must protect them and guarantee their reliability, availability and integrity in order to maintain an excellent institutional image. The constant advance of Information and Communication Technologies, has also led to the increase in threats to computer assets that exploits vulnerabilities causing computer incidents resulting in partial or total arrest of normal processes and activities that develops a entity, for this reason you must have an updated computer contingency plan and thus be able to avoid or minimize the effects of computer incidents guaranteeing the operational continuity of the institution and the integrity of your data. This research project proposes the Design of a Computer Contingency Plan based on the quality standard ISO 27001: 2013 for the Athens Education Unit, evaluating each of the threats and vulnerabilities to which its main IT assets are exposed . This plan will allow recovery in the event of any eventuality that may affect the continuity of the institution’s activities, reducing the impact produced, since it details the actions to be taken before, during or after the materialization of the threats, by restoring the equipment. and activities to their initial state, avoiding the loss of valuable information for the educational unit.