Auditoría informática soportada por COBIT e ISO 27001 en las instituciones financieras públicas de la ciudad de Guayaquil.

Abstract

The following titration work describes the Computer Audit that will be done to the Banking Core Cobis System in BanEcuador BP, to its Financial Management, using international standards, ISO 27001, which serves to specify the requirements necessary to establish, implement, maintain and improve an information security management system (ISMS) based on the continuous improvement cycle in conjunction with COBIT, which is a tool developed to audit the management and control of information systems. First, the main concepts of computer audit, ISO 27001, COBIT and the financial area will be defined, later and in conjunction with the identification of the methodology to be proposed and steps to follow, through the analysis of information and the execution of research techniques the results of what are the main critical processes and the connection of these with the IT area will be revealed, evaluating their level of maturity, managing to identify the weaknesses that are run in the organization because they do not have better controls to minimize the risks. Finally, conclusions and recommendations will be issued to be taken into consideration by BanEcuador B.P.