Tool for computer security audit

Abstract

The issue of computer security in our country has become a fundamental pillar, since the State has as one of its prioritized activities the computerization of Cuban society, guaranteeing cybersecurity efficiently and effectively. For this reason, updates have been made to our legal basis, approving new Decree-Laws that will govern these processes. However, it is necessary to establish a framework that allows standardizing computer security audits based on what is legislated. Cuba does not have a specific standard for computer security or to carry out audits related to this issue, there are only decree laws, resolutions and the methodology by which the Computer Security Management System prepared by the Office of Security for Computer Networks. This research aims to develop software that allows standardizing the computer security audit process in the country, taking as a reference what is stipulated internationally and contextualizing it to the Cuban reality, having as support the current legislation. The research carried out is descriptive, and Scrum was used as a framework, specifically the Scrum Guide 2020 version. As results, it provides contributions both methodologically and practically. The first of them is given by the elaboration of the guide for carrying out computer security audits, while the second is evidenced in the design and implementation of software that automates the process and provides feedback to users.