Análisis comparativo entre las metodologías de gestión de riesgos de los Sistemas de Gestión de Seguridad de la Información (SGSI): Magerit y Octave.

On a daily basis, companies are trying to counteract the effects of constant technological advances and access to large amounts of data, many organizations experience numerous types of computer attacks, data manipulation and information loss. That is why the study of this research was carried out in a comparative analysis between the risk management methodologies of the information security management systems (ISMS): MAGERIT and OCTAVE, which allows identifying which methodology provides the best decision making regarding information assets. In this sense, the main objective was raised: To carry out a comparative analysis between the risk management methodologies: Magerit and Octave. The inquiry was based on bibliographic research, referenced in theses, university repositories, indexed databases and journal articles, consecutively, the analytical method was chosen and in turn the type of descriptive research. Therefore, the comparative study was carried out based on the general criteria of each of the chosen methodologies, that is, Magerit and Octave, from the bases of their concepts and their phases, as well as their main characteristics, strengths and weaknesses. The foregoing led to the formulation of the conclusions, which were considered that given the comparisons of the methodologies in question, unlike OCTAVE, MAGERIT takes safer processes in its execution, due to the fact that its risk analysis is more complete. Although the two methodologies have their scope of application, due to the fact that an organization uses them more than others, both of them can be used in companies, both public and private.

• Hovedforfatter: Contreras Olea, Gissela Annabel (author)
• Format: bachelorThesis
• Udgivet: 2022
• Fag: Seguridad de la información; Metodologías; Gestión de riesgos; Magerit; Octave
• Online adgang: http://dspace.utb.edu.ec/handle/49000/12551