Análisis de los riesgos y vulnerabilidades de un data center en Colombia para crear una matriz de riesgo acorde lo establecido en la norma ISO 27001: 2013

Abstract

A data center stores, protects and distributes information through the use of tools to analyze data that allow better decisions to be made within organizations. The current environment requires companies to have policies aimed at information security, which represents a decisive role for its correct operation, guaranteeing the three fundamental pillars of information; confidentiality, integrity and availability. For this research, the analysis of the risks and vulnerabilities of a data center in Colombia was carried out through the elaboration of a risk matrix under the parameters established in the ISO 27001: 2013 standard, through which controls were listed for the risk performance, monitoring, operation and effectiveness of a data center, taking into account the constant improvement of information security.