Guía metodológica de gestión de riesgos de seguridad de la información para la administración de los servidores virtualizados.

Abstract

The objective of this research work was to develop a methodological guide for information security risk management in the administration of virtualized servers to improve the control of possible events that affect the level of security. The type of research was bibliographic, documentary, and descriptive, with a quali-quantitative approach, in a particular environment, FibraTelecom, an internet service provider in the province of Chimborazo, the population was 45 professionals in charge of the administration of virtualized servers, the study group was evaluated with the same instrument before and after the application of the guide. The statistical T Student test was used to analyze the results of the initial survey and the final survey, showing that the p-value is less than the significance value. Additionally, 93% of the respondents answered affirmatively in the final survey, so the proposed guide has favorable results for identifying and mitigating risks.