Evaluación a la gestión de riesgos en las TIC en el instituto nacional de medicina legal y ciencias forenses.

Abstract

This document presents the evaluation of risk management to the information and communication technology process of the National Institute of Legal Medicine and Forensic Sciences. Whose basis is the ISO standard (International Organization for Standardization) 31000: 2018, considering that these indicate "what" is required for risk management but not indicated "how" this management can be carried out. In addition, it includes an analysis and recommendations for risk management. The analysis is developed for the ICT process since the increase in The use of information technologies in institutions requires the application of risk management for taking preventive measures and continuous improvement.