Diseño e implementación de un sistema de seguridad mediante controles CIS para redes de acceso. Caso Instituto Nacional de Evaluación Educativa (INEVAL).

Abstract

This research proposes the implementation of a security system for vulnerability mitigation in the LAN network, based on the cybersecurity controls of the Center of Internet Security (CIS). In the first place, an analysis of technological tools for the management of vulnerabilities in a LAN was carried out, the one selected was InsightVM from Rapid7. This software allows to verify the correct implementation of the CIS configuration templates, being therefore the one that sticks more to the needs of the research, after a scan of vulnerabilities to the critical teams of INEVAL was performed, resulting in 58 vulnerabilities of which 12 were critical, 11 severe and 35 moderate, for the realization of this case study the first two categories were taken into account since, they are more likely to be exploited. For the design of the security system mentioned above, a selection of CIS controls was made and applied to the 23 vulnerabilities treated in this study. After the implementation of the security system, a second scan of the LAN was performed, obtaining a percentage of 47.8% of managed vulnerabilities. Therefore, it is recommended to perform a periodic vulnerability analysis on critical computers in the LAN network in order to remedy these security gaps before they are exploited by third parties and cause loss of information or system failures.