Análisis de los programas de concientización de seguridad de la información en comtec

Abstract

In the field of information security, we seek to take into account all the possible threats that may occur on the information and data; one of these events, are social engineering attacks, where end users regulate of the entity are often compromised, because they do not have the knowledge to deal with these types of events. The attackers seek to identify different security gaps, focusing on the human behavior and exploiting psychological aspects for profit economic through deception techniques; Therefore, the human factor is the greatest attacker's target, due to his lack of knowledge or overconfidence in front of the information at your fingertips. Organizations invest a large amount of resources in infrastructure to protect your information; however, one of the weakest links is the users final, of which companies do not dedicate adequate time and do not project financial resources to train and educate people