Propuesta metodológica para un plan de continuidad del negocio alineada a la norma ISO/IEC 22301 y recuperación ante desastres en cloud

Abstract

This thesis project is focused on reaching a methodological proposal for a Business Continuity Plan (BCP) aligned with ISO/IEC Standard 22301 and Cloud (DRaaS) disaster recovery. This shall been done for the Centro de Educación Continua de la Escuela Politécnica Nacional (CEC-EPN) (Center for Continuing Education at the Nacional Polytechnic School), specifically for the Department of Technology Management (CGT). This proposal will also include a prototype. Chapter 1 provides a general introduction to Cloud Computing, focusing on its types of topology and its use. This chapter will also provide an arduos study on providers that offer DRaaS service. Additionally, an analysis on the current situation at CEC-EPN and CGT will be provided, analyzing ISO/IEC Standard 22301 and focusing on each and every one of its clauses. Chapter 2 develops the BCP for CEC-EPN based on the previously studied requirements, all the while following the established standard. Following this, the implementation of the DRaaS prototype. Chapter 3 presents the necessary information to prove the prototype’s compliance and analyzes the results obtained from the prototype. A comparison of the acquired benefits will also be given. Chapter 4 presents the conclusions and recommendations obtained.