Plan de contingencia informático basado en la Norma ISO 27001 para el área de TI de la Empresa Pública Municipal Gestión Integral de Desechos Sólidos de Ambato (EPM-GIDSA).

Abstract

Today, the information and data managed by companies are massive, making it crucial to ensure their availability, quality, and integrity. Alongside systems, services, and processes, these form highly valuable IT assets that must be safeguarded to uphold corporate image, competitiveness, and compliance. An IT contingency plan mitigates risks in the event of threats or disasters, maintaining crucial business operations' continuity during incidents until systems and services are fully restored. Vital information must be protected to prevent leaks, alteration, or unavailability. This research project proposes designing an IT Contingency Plan based on the latest 2022 version of the international standard ISO 27001 for Empresa Pública Gestión Integral de Desechos Sólidos de Ambato (EPM-GIDSA). It will analyze threats and vulnerabilities of its most critical IT assets. The plan will aid recovery from disasters or unforeseen events jeopardizing business continuity, outlining actions before, during, and after incidents to prevent information loss and restore IT systems to operational status.