Análisis para la creación de un equipo CSIRT académico en la Universidad de las Américas

The degree project proposes an analysis for the creation of a computer security incident response team at the University of the Americas, due to the increase in services, products and experiences offered. This also implies an increase in incidents and threats within the organization. The main objective of this project is focused on the analysis of the different organizational models established and recognized by control bodies at national and international level. So, the services and infrastructure that the university currently has can be adapted or used as a reference for the implementation of a computer security incident response team or CSIRT. Allowing a future, the constant improvement of processes, services and changes the level of security in the institution. The idea is that people and organizations, regardless of their role in the company, can develop the first phases of an analysis for incident management or, in turn, the implementation of a specialized team to handle, monitor and mitigate incidents or threats. So that the member network grows, and vulnerabilities can be detected in the systems quickly and without the problem escalating exponentially.