Artículo de revisión de Metodologías de Análisis de Riesgos de la Información, enfocado a Pymes

Abstract

This article explores different points of view of how to identify the risks presented by the information of companies today, there are different points of view on this, but the vast majority are designed for large companies that in turn have large structures, which make the implementation of these in most Colombian companies very complex. This review aims to unify different points of view and synthesize in an agile and simple manner such methodologies that will generate value to SMEs in the analysis and management of the risks associated with their information, not only in aspects that have to do with cybersecurity but also with the handling of physical information and the knowledge that can make the difference between one and another company that compete for the same market. The information security management systems are based on how to implement a sustainability model that manages to establish an efficient management of these risks, which in turn will create an organizational culture that protects sensitive information, which is one of the assets most important in organizations that develop their business relying on information technologies.