Audit guide for the evaluation of internal control information security with focus Cobit 5: case Catholic University of Cuenca (UCACUE)

Abstract

The aim of this work is generate a for IT Audit dedicated to  evaluation of Internal Control Information Security aligned to the criteria of best practices of COBIT 5, with the intention to support better safety information in the Catholic University of Cuenca. COBIT 5 is taken as reference, summarized in the following phases: analysis of the organizational environment, determining the scope and objectives of the audit, identifying key players to be interviewed, preliminary approach context to be audited, determination resources needed to perform the audit work plan development, implementation of tasks and activities. In a phase of more detailed mapping goals and IT processes are executed after the main instruments for implementing the Audit Guide ere  developed, which once implemented it possible to identify initiatives in information security provided by the organization, specifically the process DSS05 code COBIT 5, entitled "Managing the security services" was exploited. As a result a diagnosis of Internal Control Information Security at the Catholic University of Cuenca was obtained and could establish audit findings that were reflected in the final report. Terminal phase as the letter addressed to top management on the most critical findings requiring urgent attention was drawn.