Auditoria al control y mantenimiento de la infraestructura tecnológica del departamento tecnológico de la Espam MFL

The application of an audit control and maintenance of the technological infrastructure in the Technology Department of the ESPAM MFL, allowed us to evaluate the level of compliance application of best practices, standards and internal control standards of IT Comptroller General of the Ecuadorian St...

全面介紹

Saved in:
書目詳細資料
主要作者: Rivera Chávez, María Víctoría (author)
其他作者: Zambrano Bravo, María Fernanda (author)
格式: bachelorThesis
語言:spa
出版: 2015
主題:
在線閱讀:http://repositorio.espam.edu.ec/handle/42000/64
標簽: 添加標簽
沒有標簽, 成為第一個標記此記錄!
實物特徵
總結:The application of an audit control and maintenance of the technological infrastructure in the Technology Department of the ESPAM MFL, allowed us to evaluate the level of compliance application of best practices, standards and internal control standards of IT Comptroller General of the Ecuadorian State regarding the processes, policies and procedures of technological resources (communications and networking, computing, software base) existing in the state, for that purpose, the particular methodology was used in the International Standards Audit, divided into three phases: Planning, wrapped a complete internal and external to the entity using the evaluation of internal control in TI 410-09 and ISO 27000 in order to determine the facts further study of all elements relevance; at the stage of execution audit programs were applied, which revealed the main findings arising in the entity and the phase of Communicating Results conclusions and recommendations were detailed by submitting the Final Report. Based on the results of the evaluation, it was determined that the audited area carries general guidelines for control and maintenance the IT infrastructure, but not properly applied the standards mentioned above, showing that the risk is high and confidence is low in their processes, therefore, it is appropriate to apply these regulations to allow greater organization and take responsibility, minimizing risks in technological infrastructure.