ESTIMULADOR ELÉCTRICO TRANSCORNEAL

Abstract

The most important asset within any organization is information. Through its processing, creating value and achieving organizational goals can be done. Therefore, the organizations, as part of their business processes, growth and innovation, acquire technologies that hold the information processing, the decision making and the automating of their business processes. Many organizations obtain software technology and custom-designed applications by specialist computer consultants, who use several Software Development Life Cycle (SDLC) models and methodologies to design the specific information system (IS). Generally, the application developers focus their time, knowledge, resources and effort to the specified functionality, and forgetting at the same time, the implementation of security controls in their development. The most part of the time, the security validation is the last phase that is considered or even, it´s insolated to the development process. Given this situation, it´s a hard task to establish a specific security level to the systems that are developed. In this case, uncertainty is created in the organizations that own the IS, due to their IS interact with other systems via data-network, which reveals a set of vulnerabilities associated of the IS. For the IS owners, computer specialists, developers and security information auditors, should be important to have a mechanism that allows them to have a security certainty degree of there IS. In this paper, it is proposed that for IS, developed or acquired, should be considered as a priority not only meet the functional requirements but also with minimum safety requirements. Throughout this paper examines two options for providing security to the IS: the first (a priori), which suggests the adoption of a methodology that considers the life cycle of safe, the second option (a posteriori) suggests using a model of IS security audit, which ensures that applications developed have the necessary controls to reduce the typical vulnerability applications. It is intended that these two options in securing a IS will serve as recommendations to reduce risk and vulnerability. Finally, this paper identifies the most viable alternative, not saying that this is the best for providing security to the IS, the option of adopting a model of audits. On this basis, the proposal is made of a model of IS security audit and to support the adoption of this approach within any organization, defines a methodology and a set of Standard Operating Procedures.