Elaborar un Plan de Gestión de Riesgos de las Tecnologías de Información y Comunicación basada en el Marco COBIT 5 para riesgos aplicado a la Universidad de Cuenca

Abstract

The objective is elaborate a Mitigation Risks Plan for ICT Direction of Cuenca University. As educational entity of prestige it should keep the forefront in its academics services to generate highly trained professionals, all these based on important features such as: quality, creativity and innovation. An important point for that is to have all departments or areas of University doing their activities optimally and in compliance of regulations. For this reason the Risk Management addressed to ICT is an important essential for adding value and generating a competitive advantage. The successful of it depends the adequate administration. It allows to know the risks that affect to different areas or units of business, identifying vulnerabilities and threats that have negative effects over compliance of goals or external regulations. It prevents risks materialize. In this context COBIT 5 for Risk present guidelines and model structures to achieve an optimal risk management allowing us to identify, know, analyze and treat risks. The application of this framework will allow to get the ICDT objectives satisfactorily considering compliance of the norm prescribed by the Contraloría General del Estado. Nevertheless, you should remember that it is a framework considered as a best practice, its implementation and adaptation depends on the entity and its environment. It is an adaptable tool for supporting IT Enterprise Government.