COMUNICACIONES Diseño de un plan de recuperación ante desastres basado en la norma NIST SP 800-34 rev1 para un proveedor de servicios de telecomunicaciones en el Perú TESIS Para optar el título profesional de Ingeniero de Redes y Comunicaciones AUTOR Cuta Benites, Edward Wilbert (0000-0001-6007-0244) ASESOR Flores Solis, Fernando Rolyn (0000-0002-6105-3371) Lima, 26 de febrero de 2020 I DEDICATORIA La presente tesis va dedicado a mis padres quienes se esforzaron mucho para que yo me convirtiera

more »

... en un profesional, y me inculcaron los valores necesarios para ser una persona de bien; También va dedicado a mi familia quienes siempre me motivaron para seguir adelante en mis metas trazadas; por último, agradecer a mis amigos y colegas que me apoyaron con sus consejos y experiencias para poder realizar el presente trabajo. Palabras clave: DRP; BIA; análisis de riesgos; desastre, continuidad, estrategias de contingencia. III Design of a disaster recovery plan based on the NIST SP 800-34 rev1 standard for a telecommunications service provider in Peru ABSTRACT This paper aims to develop a disaster recovery plan for a Peruvian telecommunications company, taking as a frame of reference the American standard NIST 800-34, for this the 7 contingency planning processes suggested by the standard were followed. The work is composed of 11 chapters, in the first three chapters an approach to the organization is made in order to know the internal structure in which the problematic situations that the organization faces are explored, as well as defining the objectives that will be key For the development of the entire project, in the theoretical framework the processes of the standard and the concepts necessary to understand the subject are thoroughly analyzed. In Chapter 4, the disaster recovery plan is widely developed as such, for this a business impact analysis is made with which it is possible to determine the three critical processes of the business, as part of this process a risk analysis of all assets is performed that intervene in the critical processes, this analysis serves as input to define the six disaster scenarios, as well as the strategies that allow acting in these scenarios, the necessary resources, roles and responsibilities of the response teams are defined, by On the other hand, tests and exercises of the systems implemented were carried out to guarantee their effectiveness in a real scenario. Finally, an analysis of the results is made, and the conclusions and recommendations are provided.