Implantación de un Esquema de Seguridad para un Proveedor de Servicios de Internet (ISP)

Abstract

The main objective of this Thesis is to implement a Security Scheme for an ISP, which provides the necessarysecurity to users, protecting them from computer attacks that could be carried out from the Internet. In Chapter I, the Staged Work Methodology is defined, a conceptual review of the Safety Assessment Methodologies based on “COBIT” and its Audit Guidelines is presented. Chapter II presents the implementation of Stages 1 and 2 of our methodology, Stage 1 initially considers the assessment of the security in the Current Infraestructure. In Stage 2, recommendations base don Test Matrices and Control Evaluation according to COBIT are issued, correcting gaps and security vulnerabilities. Chapter III, covers stages 3 and 4, in Step 3, a Security Scheme for the ISP was analyzed, design and implemented, considering the critical elements of the infraestructura. In Stage 4, an Audit Trail is carriedout to verify that the implemented Safety Scheme, which complies with the Safety recommendations of Stage 2, finally reassesses the level of risk and exposure to attacks, after implementing the Safety Scheme. In Chapter IV, the respective conclusions and recommendatios are issued.