Currently, the number of cyber-attacks is increasing because of the lack of culture of computer security. This is the main cause of this problem. Apart from this, there is a difficulty of finding centralized, clear and practical information for the staff, thus it generates the risk of access controls and vulnerabilities so personal data and company’s information is exposed. That is why it is important to have a place where support is provided, the information is concentrated and offers answers to increase computer security, using a format that is clear enough for all people who access to such information. This is also a business tool that detects vulnerabilities and threats, offering proposals for technological solutions. Objectives: To reduce the risks of insecurity through a Culture of Information Security to guarantee the confidentiality, integrity, speed and availability of information. To analyze security vulnerabilities that may exist in the management of information and systems that affect personally or professionally. To establish awareness mechanisms for staff on IT security issues. To centralize information on the topic of computer security through a website that serves to disseminate attack prevention techniques and possible solutions to computer security vulnerabilities. To streamline the application of surveys through an app that serves to provide technological solutions to the institutions that are surveyed. Methodology: The project is based on comprehensive research, since it explains the vulnerabilities and threats that may occur, predicting the risk and impact that it might generate as well as proposing a solution to increase the degree of computer security. Carrying out a hypothetical-deductive research describing the processes performed and those that are planned in the objective of study, it is pretended to demonstrate that a computer culture can reduce the risks of security in a company and in the society. The type of research techniques used are questionnaires, for this reason series of questions are designed to determine the computer security at the user level. Contribution: A mobile application is developed to carry out the surveys showing statistics in graphs in order to provide technological solutions for the companies. Therefore, the statistical data is reflected on one of the sections of the website developed, where also shows tips, techniques and methodologies to increase security in homes and businesses.

Nowadays there is a need to fortify the Information Security of organizations, which increase the interest of the private sector to work collaboratively with researchers and educators to structure an organism that allows to asses those who require advice in this area. This is how the Information Security Committee emerges and that is how results the need to create the sense of how it will act. Objectives: Make a diagnostic of the perception of the Information Security Committee about the elements that form the normative planning of organizations. Create the mission, vision and define of the Information Security Committee. Methodology: The project is based on a qualitative research, in which five members of the Information Security Committee a fill an semi structured interview to link the processed knowledge with the context where the professional activity is developed. Contribution: Making the normative planning for the Information Security Committee, creation of the mission, vision and the definition of the values that will provide a guide for the establishment of the objectives and strategies.

No abstract