SlideShare una empresa de Scribd logo
1 de 154
Descargar para leer sin conexión
!
!              "#$#%&'(#)!*'!
               +*"#$#%&(+,#)$'%!
               -./0#,+%!


!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!

                   MAGERIT – versión 2
        "1234353678!41!+9:5;<;<!=!>1<2;?9!41!(;1<63<!
              41!53<!%;<21@8<!41!#9A3B@8C;?9!
                              !
                                I - Método
!




    D!"#$#%&'(#)!*'!+*"#$#%&(+,#)$'%!-./0#,+%!
    "84B;4E!FG!41!HI9;3!41!FGGJ!
    $#-)!KFJLGMLGNOLP!
    Catálogo general de publicaciones oficiales
    Q22RSTTRIU5;C8C;391<V84@;9;<2B8C;39V1<!!
    !
!




    EQUIPO RESPONSABLE DEL PROYECTO MAGERIT versión 2
    !
    Director:
    Francisco López Crespo
    "#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%!
    !
    Miguel Angel Amutio Gómez
    "#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%!
    !
    Javier Candau
    3'$&()!3(#4&)256#.)!7-.#)$-2!
    !
    Consultor externo:
    José Antonio Mañas
    3-&'*(8&#.)!
    9$#:'(%#*-*!/)2#&;.$#.-!*'!"-*(#*!
"-6'(#&!:'(%#5$!<!

Índice!
1. Introducción a Magerit ..................................................................................................6
   @D@D!E1F'&#:)%!*'!"-6'(#& DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDG
   @D<D!H$&()*I..#5$!-2!-$82#%#%!J!6'%&#5$!*'!(#'%6)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDK
   @D>D!L2!-$82#%#%!J!6'%&#5$!*'!(#'%6)%!'$!%I!.)$&'M&)DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDN
      @D>D@D!3)$.#'$.#-.#5$!J!O)(,-.#5$DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDP
      @D>D<D!H$.#*'$.#-%!J!('.I4'(-.#5$ DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDP
   @DBD!E(6-$#Q-.#5$!*'!2-%!6IR-%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDP
      @DBD@D!")*)!*'!',42') DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@S
      @DBD<D!L2!.-&82)6)!*'!'2','$&)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@@
      @DBD>D!T-!6IR-!*'!&;.$#.-%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@@
   @DAD!/-(-!2)%!UI'!V-$!&(-1-F-*)!.)$!"-6'(#&!:@DSDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@<
   @DGD!L:-2I-.#5$W!.'(&#O#.-.#5$W!-I*#&)(R-!J!-.('*#&-.#5$DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@<
   @DKD!X3I8$*)!4().'*'!-$-2#Q-(!J!6'%&#)$-(!2)%!(#'%6)%Y DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@B
2. Realización del análisis y de la gestión .....................................................................16
   <D@D!+$82#%#%!*'!Z#'%6)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@G
      <D@D@D!/-%)!@[!+.&#:)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@K
      <D@D<D!/-%)!<[!+,'$-Q-%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD<<
      <D@D>D!/-%)!B[!'&'(,#$-.#5$!*'2!#,4-.&) DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD<>
      <D@DBD!/-%)!A[!'&'(,#$-.#5$!*'2!(#'%6)DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD<B
      <D@DAD!/-%)!>[!]-2:-6I-(*-%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD<B
      <D@DGD!Z':#%#5$!*'2!4-%)!B[!#,4-.&)!('%#*I-2 DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD<G
      <D@DKD!Z':#%#5$!*'2!4-%)!A[!(#'%6)!('%#*I-2 DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD<G
   <D<D!^'%&#5$!*'!Z#'%6)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD<G
      <D<D@D!T-!#$&'(4('&-.#5$!*'!2)%!:-2)('%!*'!#,4-.&)!J!(#'%6)!('%#*I-2'% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD<G
      <D<D<D!]'2'..#5$!*'!%-2:-6I-(*-%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD<K
      <D<D>D!/;(*#*-%!J!6-$-$.#-% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD<N
      <D<DBD!T-!-.&#&I*!*'!2-!#('..#5$ DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD>S
      <D<DAD!Z':#%#5$!*'2!4-%)!@[!-.&#:)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD>@
3. Estructuración del proyecto .......................................................................................32
   >D@D!/-(&#.#4-$&'%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD>>
   >D<D!'%-(()22)!*'2!4()J'.&) DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD>B
      >D<D@D!_#%#5$!62)1-2 DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD>K
   >D>D!/().'%)!/@[!/2-$#O#.-.#5$DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD>N
      >D>D@D!+.&#:#*-*!+@D@[!L%&I*#)!*'!)4)(&I$#*-*DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDBS
      >D>D<D!+.&#:#*-*!+@D<[!'&'(,#$-.#5$!*'2!-2.-$.'!*'2!4()J'.&)DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDB<
      >D>D>D!+.&#:#*-*!+@D>[!/2-$#O#.-.#5$!*'2!4()J'.&) DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDBK
      >D>DBD!+.&#:#*-*!+@DB[!T-$Q-,#'$&)!*'2!4()J'.&)DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDAS
      >D>DAD!]R$&'%#%!*'2!4().'%)!/@ DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDAB
      >D>DGD!T#%&-!*'!.)$&()2!*'2!4().'%)!/@ DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDAB
   >DBD!/().'%)!/<[!+$82#%#%!*'!(#'%6)%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDAG
      >DBD@D!+.&#:#*-*!+<D@[!3-(-.&'(#Q-.#5$!*'!2)%!-.&#:)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDAN
      >DBD<D!+.&#:#*-*!+<D<[!3-(-.&'(#Q-.#5$!*'!2-%!-,'$-Q-%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDG>
      >DBD>D!+.&#:#*-*!+<D>[!3-(-.&'(#Q-.#5$!*'!2-%!%-2:-6I-(*-%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDGA
      >DBDBD!+.&#:#*-*!+<DB[!L%&#,-.#5$!*'2!'%&-*)!*'!(#'%6)DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDGK
      >DBDAD!]R$&'%#%!*'2!4().'%)!/< DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDKS
      >DBDGD!T#%&-!*'!.)$&()2!*'2!4().'%)!/< DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDK@
   >DAD!/().'%)!/>[!^'%&#5$!*'!(#'%6)%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDK<
      >DAD@D!+.&#:#*-*!+>D@[!`),-!*'!*'.#%#)$'%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDK>
      >DAD<D!+.&#:#*-*!+>D<[!L2-1)(-.#5$!*'2!42-$!%'6I(#*-*!*'!2-!#$O)(,-.#5$ DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDKA
      >DAD>D!+.&#:#*-*!+>D>[!LF'.I.#5$!*'2!42-$DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDKN
      >DADBD!]R$&'%#%!*'2!4().'%)!/> DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDKP
      >DADAD!T#%&-!*'!.)$&()2!*'2!4().'%)!/> DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDKP
4. Desarrollo de sistemas de información .....................................................................80
   BD@D!H$#.#-2#Q-.#5$!*'!2)%!4().'%)%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDNS
=!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%!                             !                                              486#$-!>!?*'!@ABC!
"-6'(#&!:'(%#5$!<!
   BD<D!3#.2)!*'!:#*-!*'!2-%!-42#.-.#)$'% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDN@
      BD<D@D!/2-$!*'!%#%&',-% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDN@
   BD>D!+$82#%#%!*'!(#'%6)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDN<
   BDBD!^'%&#5$!*'!(#'%6)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDN<
   BDAD!"a`ZH3+!:'(%#5$!>DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDNB
      BDAD@D!]/!b!]'6I(#*-*!*'2!4().'%)!*'!*'%-(()22)DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDNG
      BDAD<D!]]H!b!]'6I(#*-*!*'2!%#%&',-!*'!#$O)(,-.#5$DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDNN
   BDGD!Z'O'('$.#-% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDP<
5. Consejos prácticos......................................................................................................94
   AD@D!/-(-!#*'$&#O#.-(!-.&#:)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDPB
   AD<D!/-(-!*'%.I1(#(!J!,)*'2-(!2-%!*'4'$*'$.#-%!'$&('!-.&#:)%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDPA
   AD>D!/-(-!:-2)(-(!-.&#:)%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDPK
   ADBD!/-(-!#*'$&#O#.-(!-,'$-Q-%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDPN
   ADAD!/-(-!:-2)(-(!-,'$-Q-% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDPN
   ADGD!/-(-!%'2'..#)$-(!%-2:-6I-(*-% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDPP
   ADKD!+4()M#,-.#)$'%!%I.'%#:-% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDPP
      ADKD@D!/()&'..#5$!18%#.- DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@SS
   ADND!Z'O'('$.#-% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@S@
Apéndice 1. Glosario .....................................................................................................102
   @D@D!`;(,#$)%!'$!'%4-c)2DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@S<
   @D<D!`;(,#$)%!-$62)%-F)$'% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@SP
   @D>D!H]EdHL3!^I#*'!K>[<SS<DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@@S
   @DBD!Z'O'('$.#-% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@@@
Apéndice 2. Referencias ...............................................................................................113
Apéndice 3. Marco legal ................................................................................................114
   >D@D!/().'*#,#'$&)!-*,#$#%&(-&#:) DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@@B
   >D<D!/()&'..#5$!*'!*-&)%!*'!.-(8.&'(!4'(%)$-2DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@@B
   >D>D!e#(,-!'2'.&(5$#.-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@@B
   >DBD!H$O)(,-.#5$!.2-%#O#.-*-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@@A
   >DAD!]'6I(#*-*!*'!2-%!('*'%!J!*'!2-!#$O)(,-.#5$ DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@@A
Apéndice 4. Marco de evaluación y certificación .......................................................116
   BD@D!]#%&',-%!*'!6'%&#5$!*'!2-!%'6I(#*-*!*'!2-!#$O)(,-.#5$!?]^]HC DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@@G
      BD@D@D!T-!.'(&#O#.-.#5$DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@@K
      BD@D<D!T-!-.('*#&-.#5$!*'!2-!'$&#*-*!.'(&#O#.-*)(- DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@@P
      BD@D>D!`'(,#$)2)6R-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@<S
      BD@DBD!Z'O'('$.#-%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@<@
   BD<D!3(#&'(#)%!.),I$'%!*'!':-2I-.#5$!?33CDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@<@
      BD<D@D!f'$'O#.#-(#)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@<<
      BD<D<D!Z'UI#%#&)%!*'!%'6I(#*-* DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@<>
      BD<D>D!3('-.#5$!*'!4'(O#2'%!*'!4()&'..#5$ DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@<B
      BD<DBD!9%)!*'!4()*I.&)%!.'(&#O#.-*)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@<A
      BD<DAD!`'(,#$)2)6R-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@<A
      BD<DGD!Z'O'('$.#-%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@<G
Apéndice 5. Herramientas.............................................................................................128
   AD@D!/HT+Z DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@<P
   AD<D!Z'O'('$.#-% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@>S
Apéndice 6. Evolución de Magerit versión 1.0 ............................................................131
   GD@D!T#1()!HD!^IR-!*'!-4()M#,-.#5$!-!2-!%'6I(#*-*!*'!2)%!%#%&',-%!*'!#$O)(,-.#5$ DDDDDDDDDDDDDDDDDD@>@
   GD<D!T#1()!HHD!^IR-!*'!4().'*#,#'$&)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@>@
   GD>D!T#1()!HHHD!^IR-!*'!&;.$#.-% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@><
   GDBD!T#1()!H_D!^IR-!4-(-!*'%-(()22-*)('%!*'!-42#.-.#)$'% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@><
   GDAD!T#1()!_D!^IR-!4-(-!('%4)$%-12'%!*'2!*),#$#)!4()&'6#12' DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@>>
   GDGD!T#1()!_HD!+(UI#&'.&I(-!*'!2-!#$O)(,-.#5$!J!'%4'.#O#.-.#)$'%!*'!2-!#$&'(O-Q!4-(-!'2!#$&'(.-,1#)!
   *'!*-&)%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@>>
   GDKD!T#1()!_HHD!Z'O'('$.#-!*'!$)(,-%!2'6-2'%!J!&;.$#.-% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@>>
=!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%!                              !                                              486#$-!B!?*'!@ABC!
"-6'(#&!:'(%#5$!<!
Apéndice 7. Caso práctico ............................................................................................134
    KD@D!T-!V#%&)(#-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@>B
    KD<D!/().'%)!/<[!+$82#%#%!*'!(#'%6)%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@>A
       KD<D@D!`-('-!`<D@D@D!H*'$&#O#.-.#5$!*'!-.&#:)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@>K
       KD<D<D!`-('-!`<D@D<[!'4'$*'$.#-% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@>N
       KD<D>D!`-('-!`<D@D>[!_-2)(-.#5$ DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@>P
       KD<DBD!+.&#:#*-*!+<D<[!3-(-.&'(#Q-.#5$!*'!2-%!-,'$-Q-%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@B@
       KD<DAD!+.&#:#*-*!+<DB[!L%&#,-.#5$!*'!#,4-.&)!J!(#'%6) DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@B<
       KD<DGD!+.&#:#*-*!+<D>[!3-(-.&'(#Q-.#5$!*'!2-%!%-2:-6I-(*-%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@BA
       KD<DKD!+.&#:#*-*!+<DB[!L%&#,-.#5$!*'2!'%&-*)!*'!(#'%6)DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@BN
    KD>D!/().'%)!/>[!^'%&#5$!*'!(#'%6)%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@AS
       KD>D@D!+.&#:#*-*!+>D@[!`),-!*'!*'.#%#)$'%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@AS
       KD>D<D!+.&#:#*-*!+>D<[!/2-$!*'!%'6I(#*-*DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@A@
       KD>D>D!L:)2I.#5$!*'!2)%!#$*#.-*)('%!*'!#,4-.&)!J!(#'%6) DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@A<
       KD>DBD!3-2#O#.-.#5$!%'60$!2)%!3(#&'(#)%!*'!]'6I(#*-*!*'2!3]+LDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@AB
       KD>DAD!3-2#O#.-.#5$!%'60$!2-!$)(,-!H]EdHL3!@KKPP[<SSA DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@AB
!




=!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%!                              !                                              486#$-!A!?*'!@ABC!
"-6'(#&!:'(%#5$!<!                                  !                                      H$&()*I..#5$!



1. Introducción a Magerit
L2!3]+L @!V-!'2-1)(-*)!J!4(),I':'!"-6'(#& <!.),)!('%4I'%&-!-!2-!4'(.'4.#5$!*'!UI'!2-!+*,#$#%g
&(-.#5$!?J!'$!6'$'(-2!&)*-!2-!%).#'*-*C!*'4'$*'!*'!O)(,-!.('.#'$&'!*'!2-%!&'.$)2)6R-%!*'!2-!#$O)(g
,-.#5$!4-(-!2-!.)$%'.I.#5$!*'!%I%!)1F'&#:)%!*'!%'(:#.#)D!T-!(-Q5$!*'!%'(!*'!"-6'(#&!'%&8!*#('.&-g
,'$&'!('2-.#)$-*-!.)$!2-!6'$'(-2#Q-.#5$!*'2!I%)!*'!2)%!,'*#)%!'2'.&(5$#.)%W!#$O)(,8&#.)%!J!&'2',8g
&#.)%W!UI'!%I4)$'!I$)%!1'$'O#.#)%!':#*'$&'%!4-(-!2)%!.#I*-*-$)%h!4'()!&-,1#;$!*-!2I6-(!-!.#'(&)%!
(#'%6)%! UI'! *'1'$! ,#$#,#Q-(%'! .)$! ,'*#*-%! *'! %'6I(#*-*! UI'! 6'$'('$! .)$O#-$Q-! '$! '2! I%)! *'!
&-2'%!,'*#)%D!
L$!'2!4'(#)*)!&(-$%.I((#*)!*'%*'!2-!4I12#.-.#5$!*'!2-!4(#,'(-!:'(%#5$!*'!"-6'(#&!?@PPKC!V-%&-!2-!
O'.V-W!'2!-$82#%#%!*'!(#'%6)%!%'!V-!:'$#*)!.)$%)2#*-$*)!.),)!4-%)!$'.'%-(#)!4-(-!2-!6'%&#5$!*'!2-!
%'6I(#*-*D!+%R!%'!('.)6'!.2-(-,'$&'!'$!2-%!^IR-%!*'!2-!E3L >!UI'W!'$!%I!4(#$.#4#)!G!*#.'$[!
         6) Evaluación del riesgo. Los participantes deben llevar a cabo evaluaciones de riesgo.
L%&-!,'&)*)2)6R-!#$&'('%-!-!&)*)%!-UI'22)%!UI'!&(-1-F-$!.)$!#$O)(,-.#5$!,'.-$#Q-*-!J!2)%!%#%&'g
,-%!#$O)(,8&#.)%!UI'!2-!&(-&-$D!]#!*#.V-!#$O)(,-.#5$!)!2)%!%'(:#.#)%!UI'!%'!4('%&-$!6(-.#-%!-!'22-!
%)$!:-2#)%)%W!'%&-!,'&)*)2)6R-!2'%!4'(,#&#(8!%-1'(!.I8$&)!*'!'%&'!:-2)(!'%&8!'$!FI'6)!J!2'%!-JI*-g
(8!-!4()&'6'(2)D!
3)$).'(!'2!(#'%6)!-2!UI'!'%&8$!%),'&#*)%!2)%!'2','$&)%!*'!&(-1-F)!'%W!%#,42','$&'W!#,4('%.#$*#g
12'!4-(-!4)*'(!6'%&#)$-(2)%!J!4)(!'22)!V-$!-4-('.#*)!,I2&#&I*!*'!6IR-%!#$O)(,-2'%W!-4()M#,-.#)$'%!
,'&5*#.-%!J!V'((-,#'$&-%!*'!%)4)(&'!&)*-%!2-%!.I-2'%!1I%.-$!)1F'&#:-(!'2!-$82#%#%!4-(-!%-1'(!.I8$!
%'6I()%!?)!#$%'6I()%C!'%&8$!J!$)!22-,-(%'!-!'$6-c)D!L2!6(-$!('&)!*'!&)*-%!'%&-%!-4()M#,-.#)$'%!
'%!2-!.),42'F#*-*!*'2!4()12',-!-2!UI'!%'!'$O('$&-$h!.),42'F#*-*!'$!'2!%'$&#*)!*'!UI'!V-J!,I.V)%!
'2','$&)%!UI'!.)$%#*'(-(!J!UI'W!%#!$)!%'!'%!(#6I()%)W!2-%!.)$.2I%#)$'%!%'(8$!*'!4).)!O#-(D!L%!4)(!
'22)!UI'!%'!4'(%#6I'!I$-!-4()M#,-.#5$!,'&5*#.-!UI'!$)!*'F'!2I6-(!-!2-!#,4():#%-.#5$W!$#!*'4'$*-!
*'!2-!-(1#&(-(#'*-*!*'2!-$-2#%&-D!
/'%'!-!UI'!%'!V-!4I'%&)!'$!,-$)%!*'!2)%!%#%&',-%!*'!#$O)(,-.#5$!6(-:'%!('%4)$%-1#2#*-*'%!4-(-!
.I,42#(!2)%!)1F'&#:)%!*'!2-%!)(6-$#Q-.#)$'%W!$)!*'F-!*'!%'(!I$!&',-!('.I(('$&'!2-!#$UI#'&I*!4)(!%I!
%'6I(#*-*D! T)%! -O'.&-*)%W! UI'! O('.I'$&','$&'! $)! %)$! &;.$#.)%W! %'! 4('6I$&-$! %#! '%&)%! %#%&',-%!
,'('.'$!%I!.)$O#-$Q-W!.)$O#-$Q-!UI'!%'!:'!,'(,-*-!4)(!.-*-!O-22)!JW!%)1('!&)*)W!.I-$*)!2-!#$g
:'(%#5$!'$!*'O'$%-!*'!2)%!,'*#)%!*'!&(-1-F)!$)!%'!&(-*I.'!'$!2-!-I%'$.#-!*'!O-22)%D!T)!#*'-2!'%!
UI'!2)%!%#%&',-%!$)!O-22'$D!/'()!2)!.#'(&)!UI'!%'!-.'4&-!.)$:#:#(!.)$!%#%&',-%!UI'!O-22-$D!L2!-%I$&)!
$)!'%!&-$&)!2-!-I%'$.#-!*'!#$.#*'$&'%!.),)!2-!.)$O#-$Q-!'$!UI'!'%&8$!1-F)!.)$&()2[!%'!%-1'!UI;!
4I'*'!4-%-(!J!%'!%-1'!UI;!V-.'(!.I-$*)!4-%-D!L2!&',)(!-!2)!*'%.)$).#*)!'%!'2!4(#$.#4-2!)(#6'$!*'!
2-!*'%.)$O#-$Q-!JW!'$!.)$%'.I'$.#-W!-UIR!%'!1I%.-!.)$).'(!4-(-!.)$O#-([!.)$).'(!2)%!(#'%6)%!4-(-!
4)*'(!-O()$&-(2)%!J!.)$&()2-(2)%D!

1.1. Objetivos de Magerit
"-6'(#&!4'(%#6I'!2)%!%#6I#'$&'%!)1F'&#:)%[!
#('.&)%[!
    @D! .)$.#'$.#-(!-!2)%!('%4)$%-12'%!*'!2)%!%#%&',-%!*'!#$O)(,-.#5$!*'!2-!'M#%&'$.#-!*'!(#'%6)%!J!
        *'!2-!$'.'%#*-*!*'!-&-F-(2)%!-!&#',4)!
    <D! )O('.'(!I$!,;&)*)!%#%&',8&#.)!4-(-!-$-2#Q-(!&-2'%!(#'%6)%!
    >D! -JI*-(!-!*'%.I1(#(!J!42-$#O#.-(!2-%!,'*#*-%!)4)(&I$-%!4-(-!,-$&'$'(!2)%!(#'%6)%!1-F)!.)$&()2!



                                               !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
@! 3]+L[!3)$%'F)!]I4'(#)(!*'!+*,#$#%&(-.#5$!L2'.&(5$#.-D!
<! "+^LZH`[!"'&)*)2)6R-!*'!+$82#%#%!J!^'%&#5$!*'!Z#'%6)%!*'!2)%!]#%&',-%!*'!H$O)(,-.#5$!
>! ^IR-%!*'!2-!E3L!4-(-!2-!%'6I(#*-*!*'!2)%!%#%&',-%!*'!#$O)(,-.#5$!J!('*'%D!i-.#-!I$-!.I2&I(-!*'!%'6Ig
   (#*-*D!<SS<D!
=!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%!          !                                486#$-!G!?*'!@ABC!
"-6'(#&!:'(%#5$!<!                                     !                                         H$&()*I..#5$!
H$*#('.&)%[!
   BD! 4('4-(-(!-!2-!E(6-$#Q-.#5$!4-(-!4().'%)%!*'!':-2I-.#5$W!-I*#&)(R-W!.'(&#O#.-.#5$!)!-.('*#&-g
       .#5$W!%'60$!.)(('%4)$*-!'$!.-*-!.-%)!
`-,1#;$!%'!V-!1I%.-*)!2-!I$#O)(,#*-*!*'!2)%!#$O)(,'%!UI'!('.)6'$!2)%!V-22-Q6)%!J!2-%!.)$.2I%#)g
$'%!*'!I$!4()J'.&)!*'!-$82#%#%!J!6'%&#5$!*'!(#'%6)%[!
   Modelo de valor
     3-(-.&'(#Q-.#5$!*'2!:-2)(!UI'!('4('%'$&-$!2)%!-.&#:)%!4-(-!2-!E(6-$#Q-.#5$!-%R!.),)!*'!2-%!
     *'4'$*'$.#-%!'$&('!2)%!*#O'('$&'%!-.&#:)%D!
   Mapa de riesgos
     Z'2-.#5$!*'!2-%!-,'$-Q-%!-!UI'!'%&8$!'M4I'%&)%!2)%!-.&#:)%D!
   Evaluación de salvaguardas
     L:-2I-.#5$!*'!2-!'O#.-.#-!*'!2-%!%-2:-6I-(*-%!'M#%&'$&'%!'$!('2-.#5$!-2!(#'%6)!UI'!-O()$&-$D!
   Estado de riesgo
     3-(-.&'(#Q-.#5$! *'! 2)%! -.&#:)%! 4)(! %I! (#'%6)! ('%#*I-2h! '%! *'.#(W! 4)(! 2)! UI'! 4I'*'! 4-%-(! &)g
     ,-$*)!'$!.)$%#*'(-.#5$!2-%!%-2:-6I-(*-%!*'%42'6-*-%D!
   Informe de insuficiencias
      +I%'$.#-! )! *'1#2#*-*! *'! 2-%! %-2:-6I-(*-%! UI'! -4-('.'$! .),)! )4)(&I$-%! 4-(-! ('*I.#(! 2)%!
      (#'%6)%!%)1('!'2!%#%&',-D!
   Plan de seguridad
      3)$FI$&)!*'!4()6(-,-%!*'!%'6I(#*-*!UI'!4'(,#&'$!,-&'(#-2#Q-(!2-%!*'.#%#)$'%!*'!6'%&#5$!*'!
      (#'%6)%!

1.2. Introducción al análisis y gestión de riesgos
]'6I(#*-*!'%!2-!.-4-.#*-*!*'!2-%!('*'%!)!*'!2)%!%#%&',-%!*'!#$O)(,-.#5$!4-(-!('%#%&#(W!.)$!I$!*'g
&'(,#$-*)! $#:'2! *'! .)$O#-$Q-W! 2)%! -..#*'$&'%! )! -..#)$'%! #2R.#&-%! )! ,-2#$&'$.#)$-*-%! UI'!.),4()g
,'&-$! 2-! *#%4)$#1#2#*-*W! -I&'$&#.#*-*W! #$&'6(#*-*! J! .)$O#*'$.#-2#*-*! *'! 2)%! *-&)%! -2,-.'$-*)%! )!
&(-$%,#&#*)%!J!*'!2)%!%'(:#.#)%!UI'!*#.V-%!('*'%!J!%#%&',-%!)O('.'$!)!V-.'$!-..'%#12'%D!
L2!)1F'&#:)!-!4()&'6'(!'%!2-!,#%#5$!*'!2-!E(6-$#Q-.#5$W!&'$#'$*)!'$!.I'$&-!2-%!*#O'('$&'%!*#,'$%#)g
$'%!*'!2-!%'6I(#*-*[!
   Disponibilidad:
      )!*#%4)%#.#5$!*'!2)%!%'(:#.#)%!-!%'(!I%-*)%!.I-$*)!%'-!$'.'%-(#)D!T-!.-('$.#-!*'!*#%4)$#1#g
      2#*-*!%I4)$'!I$-!#$&'((I4.#5$!*'2!%'(:#.#)D!T-!*#%4)$#1#2#*-*!-O'.&-!*#('.&-,'$&'!-!2-!4()*I.g
      &#:#*-*!*'!2-%!)(6-$#Q-.#)$'%D!
   Integridad:
      )!,-$&'$#,#'$&)!*'!2-%!.-(-.&'(R%&#.-%!*'!.),42'&#&I*!J!.)(('..#5$!*'!2)%!*-&)%D!3)$&(-!2-!#$g
      &'6(#*-*W! 2-! #$O)(,-.#5$! 4I'*'! -4-('.'(! ,-$#4I2-*-W! .)((I4&-! )! #$.),42'&-D! T-! #$&'6(#*-*!
      -O'.&-!*#('.&-,'$&'!-2!.)(('.&)!*'%',4'c)!*'!2-%!OI$.#)$'%!*'!I$-!E(6-$#Q-.#5$D!
   Confidencialidad:
     )!UI'!2-!#$O)(,-.#5$!22'6I'!%)2-,'$&'!-!2-%!4'(%)$-%!-I&)(#Q-*-%D!3)$&(-!2-!.)$O#*'$.#-2#*-*!
     )!%'.('&)!4I'*'$!*-(%'!OI6-%!J!O#2&(-.#)$'%!*'!#$O)(,-.#5$W!-%R!.),)!-..'%)%!$)!-I&)(#Q-g
     *)%D! T-! .)$O#*'$.#-2#*-*! '%! I$-! 4()4#'*-*! *'! *#OR.#2! ('.I4'(-.#5$W! 4I*#'$*)! ,#$-(! 2-! .)$g
     O#-$Q-!*'!2)%!*',8%!'$!2-!)(6-$#Q-.#5$!UI'!$)!'%!*#2#6'$&'!'$!'2!,-$&'$#,#'$&)!*'2!%'.('&)W!
     J! 4I*#'$*)! %I4)$'(! '2! #$.I,42#,#'$&)! *'! 2'J'%! J! .),4(),#%)%! .)$&(-.&I-2'%! ('2-&#:)%! -! 2-!
     .I%&)*#-!*'!2)%!*-&)%D!
   Autenticidad (de quién hace uso de los datos o servicios):
     )!UI'!$)!V-J-!*I*-!*'!UI#;$!%'!V-.'!('%4)$%-12'!*'!I$-!#$O)(,-.#5$!)!4('%&-.#5$!*'!I$!
     %'(:#.#)W! &-$&)! -! O#$! *'! .)$O#-(! '$! ;2! .),)! *'! 4)*'(! 4'(%'6I#(! 4)%&'(#)(,'$&'! 2)%! #$.I,42#g
     ,#'$&)%!)!'(()('%D!3)$&(-!2-!-I&'$&#.#*-*!%'!*-$!%I42-$&-.#)$'%!J!'$6-c)%!UI'!1I%.-$!('-g
=!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%!             !                                   486#$-!K!?*'!@ABC!
"-6'(#&!:'(%#5$!<!                                    !                                       H$&()*I..#5$!
      2#Q-(!I$!O(-I*'D!T-!-I&'$&#.#*-*!'%!2-!1-%'!4-(-!4)*'(!2I.V-(!.)$&(-!'2!('4I*#)!JW!.),)!&-2W!
      OI$*-,'$&-! '2! .),'(.#)! '2'.&(5$#.)! )! 2-! -*,#$#%&(-.#5$! '2'.&(5$#.-W! 4'(,#&#'$*)! .)$O#-(! %#$!
      4-4'2'%!$#!4('%'$.#-!OR%#.-D!
`)*-%! '%&-%! .-(-.&'(R%&#.-%! 4I'*'$! %'(! ('UI'(#*-%! )! $)! *'4'$*#'$*)! *'! .-*-! .-%)D! 3I-$*)! %'!
('UI#'('$W!$)!'%!':#*'$&'!UI'!%'!*#%O(I&'$!%#$!,8%D!T)!V-1#&I-2!UI'!V-J-!UI'!4)$'(!,'*#)%!J!'%g
OI'(Q)!4-(-!.)$%'6I#(2-%D!+!(-.#)$-2#Q-(!'%&'!'%OI'(Q)!%'!*'*#.-$!2-%!,'&)*)2)6R-%!*'!-$82#%#%!J!
6'%&#5$!*'!(#'%6)%!UI'!.),#'$Q-$!.)$!I$-!*'O#$#.#5$[!
   Riesgo:
      '%&#,-.#5$!*'2!6(-*)!*'!'M4)%#.#5$!-!UI'!I$-!-,'$-Q-!%'!,-&'(#-2#.'!%)1('!I$)!)!,8%!-.g
      &#:)%!.-I%-$*)!*-c)%!)!4'(FI#.#)%!-!2-!E(6-$#Q-.#5$D!
L2!(#'%6)!#$*#.-!2)!UI'!2'!4)*(R-!4-%-(!-!2)%!-.&#:)%!%#!$)!%'!4()&'6#'(-$!-*'.I-*-,'$&'D!L%!#,g
4)(&-$&'!%-1'(!UI;!.-(-.&'(R%&#.-%!%)$!*'!#$&'(;%!'$!.-*-!-.&#:)W!-%R!.),)!%-1'(!'$!UI;!,'*#*-!
'%&-%!.-(-.&'(R%&#.-%!'%&8$!'$!4'2#6()W!'%!*'.#(W!-$-2#Q-(!'2!%#%&',-[!
   Análisis de riesgos:
     4().'%)!%#%&',8&#.)!4-(-!'%&#,-(!2-!,-6$#&I*!*'!2)%!(#'%6)%!-!UI'!'%&8!'M4I'%&-!I$-!E(6-g
     $#Q-.#5$D!
]-1#'$*)!2)!UI'!4)*(R-!4-%-(W!V-J!UI'!&),-(!*'.#%#)$'%[!
   Gestión de riesgos:
     %'2'..#5$!'!#,42-$&-.#5$!*'!%-2:-6I-(*-%!4-(-!.)$).'(W!4(':'$#(W!#,4'*#(W!('*I.#(!)!.)$&()g
     2-(!2)%!(#'%6)%!#*'$&#O#.-*)%D!
75&'%'!UI'!I$-!)4.#5$!2'6R&#,-!'%!-.'4&-(!'2!(#'%6)D!L%!O('.I'$&'!)R(!UI'!2-!%'6I(#*-*!-1%)2I&-!
$)!'M#%&'h!'$!'O'.&)W!%#',4('!V-J!UI'!-.'4&-(!I$!(#'%6)!UI'W!'%)!%RW!*'1'!%'(!.)$).#*)!J!%),'&#*)!
-2!I,1(-2!*'!.-2#*-*!UI'!%'!('UI#'('!*'2!%'(:#.#)D!
3),)!&)*)!'%&)!'%!,IJ!*'2#.-*)W!$)!'%!,'(-,'$&'!&;.$#.)W!'!#$.2IJ'!2-!*'.#%#5$!*'!-.'4&-(!I$!
.#'(&)! $#:'2! *'! (#'%6)W! *':#'$'! #,4('%.#$*#12'! %-1'(! '$! UI;! .)$*#.#)$'%! %'! &(-1-F-! J! -%R! 4)*'(!
-FI%&-(!2-!.)$O#-$Q-!UI'!,'('.'!'2!%#%&',-D!/-(-!'22)!UI;!,'F)(!UI'!I$-!-4()M#,-.#5$!,'&5*#.-!
UI'!4'(,#&-!&),-(!*'.#%#)$'%!.)$!OI$*-,'$&)!J!'M42#.-(!(-.#)$-2,'$&'!2-%!*'.#%#)$'%!&),-*-%D!

1.3. El análisis y gestión de riesgos en su contexto
T-%!&-('-%!*'!-$82#%#%!J!6'%&#5$!*'!(#'%6)%!$)!%)$!I$!O#$!'$!%R!,#%,-%!%#$)!UI'!%'!'$.-F-$!'$!2-!
-.&#:#*-*!.)$&#$I-!*'!6'%&#5$!*'!2-!%'6I(#*-*D!
L2!-$82#%#%!*'!(#'%6)%!4'(,#&'!*'&'(,#$-(!.5,)!'%W!.I8$&)!:-2'!J!.5,)!*'!4()&'6#*)%!%'!'$.I'$g
&(-$!2)%!-.&#:)%D!L$!.))(*#$-.#5$!.)$!2)%!)1F'&#:)%W!'%&(-&'6#-!J!4)2R&#.-!*'!2-!E(6-$#Q-.#5$W!2-%!-.g
&#:#*-*'%!*'!6'%&#5$!*'!(#'%6)%!4'(,#&'$!'2-1)(-(!I$!42-$!*'!%'6I(#*-*!UI'W!#,42-$&-*)!J!)4'(-g
*)W! %-&#%O-6-! 2)%! )1F'&#:)%! 4()4I'%&)%!
.)$!'2!$#:'2!*'!(#'%6)!UI'!%'!-.'4&-!2-!     análisis y gestión
                                              análisis y gestión
#('..#5$D!                                      de riesgos                    objetivos, estrategia
                                                                                objetivos, estrategia
                                                  de riesgos                             y política
                                                                                          y política
T-! #,42-$&-.#5$! *'! 2)%! .)$&()2'%! *'!
%'6I(#*-*! ('UI#'('! I$-! )(6-$#Q-.#5$!
6'%&#)$-*-! J! 2-! 4-(&#.#4-.#5$! #$O)(,-g
                                                   planificación
                                                    planificación
*-!*'!&)*)!'2!4'(%)$-2!UI'!&(-1-F-!.)$!                                                organización
                                                                                        organización
'2! %#%&',-! *'! #$O)(,-.#5$D! L%! '%&'!
4'(%)$-2! '2! ('%4)$%-12'! *'! 2-! )4'(-g
.#5$! *#-(#-W! *'! 2-! ('-..#5$! -$&'! #$.#g     implantación de
                                                  implantación de
*'$.#-%! J! *'! 2-! ,)$#&)(#Q-.#5$! '$! 6'g        salvaguardas                      concienciación
                                                                                      concienciación
                                                    salvaguardas
$'(-2! *'2! %#%&',-! 4-(-! *'&'(,#$-(! %#!                                             y formación
                                                                                        y formación
%-&#%O-.'! .)$! 'O#.-.#-! J! 'O#.#'$.#-! 2)%!
)1F'&#:)%!4()4I'%&)%D!                          gestión de config.
                                                 gestión de config.
L%&'!'%UI',-!*'!&(-1-F)!*'1'!%'(!('g                y cambios
                                                     y cambios                        incidencias y
                                                                                       incidencias y
4'&#&#:)! 4I'%! 2)%! %#%&',-%! *'! #$O)(,-g                                           recuperación
                                                                                       recuperación
.#5$! (-(-! :'Q! %)$! #$,I&-12'%h! ,8%!
=!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%!            !                                 486#$-!N!?*'!@ABC!
"-6'(#&!:'(%#5$!<!                                     !                                         H$&()*I..#5$!
1#'$!%'!'$.I'$&(-$!%),'&#*)%!-!':)2I.#5$!.)$&#$I-!&-$&)!4()4#-!?$I':)%!-.&#:)%C!.),)!*'2!'$&)(g
$)!?$I':-%!-,'$-Q-%CW!2)!UI'!'M#6'!I$-!(':#%#5$!4'(#5*#.-!'$!2-!UI'!%'!-4('$*'!*'!2-!'M4'(#'$.#-!
J!%'!-*-4&-!-2!$I':)!.)$&'M&)D!
L2!-$82#%#%!*'!(#'%6)%!4()4)(.#)$-!I$!,)*'2)!*'2!%#%&',-!'$!&;(,#$)%!*'!-.&#:)%W!-,'$-Q-%!J!%-2g
:-6I-(*-%W!J!'%!2-!4#'*(-!-$6I2-(!4-(-!.)$&()2-(!&)*-%!2-%!-.&#:#*-*'%!.)$!OI$*-,'$&)D!T-!6'%&#5$!
*'!(#'%6)%!'%!2-!'%&(I.&I(-.#5$!*'!2-%!-..#)$'%!*'!%'6I(#*-*!4-(-!%-&#%O-.'(!2-%!$'.'%#*-*'%!*'g
&'.&-*-%!4)(!'2!-$82#%#%D!

1.3.1. Concienciación y formación
L2!,'F)(!42-$!*'!%'6I(#*-*!%'!:'(R-!%'(#-,'$&'!V#4)&'.-*)!%#$!I$-!.)2-1)(-.#5$!-.&#:-!*'!2-%!4'(g
%)$-%!#$:)2I.(-*-%!'$!'2!%#%&',-!*'!#$O)(,-.#5$W!'%4'.#-2,'$&'!%#!2-!-.&#&I*!'%!$'6-&#:-W!.)$&(-(#-!
)!*'!j2I.V-(!.)$&(-!2-%!,'*#*-%!*'!%'6I(#*-*kD!L%!4)(!'22)!UI'!%'!('UI#'('!2-!.('-.#5$!*'!I$-!j.I2g
&I(-!*'!%'6I(#*-*k!UI'W!',-$-$*)!*'!2-!-2&-!*#('..#5$W!.)$.#'$.#'!-!&)*)%!2)%!#$:)2I.(-*)%!*'!%I!
$'.'%#*-*!J!4'(&#$'$.#-D!
])$!*)%!2)%!4#2-('%!OI$*-,'$&-2'%!4-(-!2-!.('-.#5$!*'!'%&-!.I2&I(-[!
   !"    I$-!4)2R&#.-!*'!%'6I(#*-*!.)(4)(-&#:-!UI'!%'!'$&#'$*-!?'%.(#&-!4-(-!2)%!UI'!$)!%)$!'M4'(&)%!
         '$!2-!,-&'(#-CW!UI'!%'!*#OI$*-!J!UI'!%'!,-$&'$6-!-2!*R-!
   !"    I$-!O)(,-.#5$!.)$&#$I-!-!&)*)%!2)%!$#:'2'%W!('.)(*-$*)!2-%!.-I&'2-%!(I&#$-(#-%!J!2-%!-.&#:#*-g
         *'%!'%4'.#-2#Q-*-%W!%'60$!2-!('%4)$%-1#2#*-*!-*%.(#&-!-!.-*-!4I'%&)!*'!&(-1-F)!
+!O#$!*'!UI'!'%&-%!-.&#:#*-*'%!.I-F'$!'$!2-!)(6-$#Q-.#5$W!'%!#,4('%.#$*#12'!UI'!2-!%'6I(#*-*!%'-!
    !"    ,R$#,-,'$&'! #$&(I%#:-[! UI'! $)! *#O#.I2&'! #$$'.'%-(#-,'$&'! 2-! -.&#:#*-*! *#-(#-! $#! V#4)&'UI'!
          -2.-$Q-(!2)%!)1F'&#:)%!*'!4()*I.&#:#*-*!4()4I'%&)%W!
    !"    %'-!j$-&I(-2k[!UI'!$)!*'!4#'!-!'(()('%!6(-&I#&)%W!UI'!O-.#2#&'!'2!.I,42#,#'$&)!*'!2-%!1I'$-%!
          4(8.&#.-%!4()4I'%&-%!J!
    !"    4(-.&#.-*-!4)(!2-!#('..#5$[!UI'!*;!'F',42)!'$!2-!-.&#:#*-*!*#-(#-!J!('-..#)$'!.)$!4('%&'Q-!
          -!2)%!.-,1#)%!'!#$.#*'$.#-%D!

1.3.2. Incidencias y recuperación
]#,;&(#.-,'$&'W!2-%!4'(%)$-%!#$:)2I.(-*-%!*'1'$!%'(!.)$%.#'$&'%!*'!%I!4-4'2!J!('2':-$.#-!.)$&#g
$I-!4-(-!4(':'$#(!4()12',-%!J!('-..#)$-(!.I-$*)!%'!4()*IQ.-$D!L%!#,4)(&-$&'!.('-(!I$-!.I2&I(-!
*'!('%4)$%-1#2#*-*!*)$*'!2)%!4)&'$.#-2'%!4()12',-%W!*'&'.&-*)%!4)(!2)%!UI'!'%&8$!.'(.-$)%!-!2)%!
-.&#:)%!-O'.&-*)%W!4I'*-$!%'(!.-$-2#Q-*)%!V-.#-!2)%!4I$&)%!*'!*'.#%#5$D!'!'%&-!O)(,-!'2!%#%&',-!
*'!%-2:-6I-(*-%!('%4)$*'(8!-!2-!('-2#*-*D!
3I-$*)!%'!4()*I.'!I$-!#$.#*'$.#-W!'2!&#',4)!',4#'Q-!-!.)(('(!'$!.)$&(-!*'2!%#%&',-[!%I!%I4'(:#g
:'$.#-! *'4'$*'! *'! 2-! 4('%&'Q-! J! .)(('..#5$! *'! 2-%! -.&#:#*-*'%! *'! ('4)(&'! J! ('-..#5$D! 3I-2UI#'(!
'(()(W!#,4('.#%#5$!)!-,1#6l'*-*!'$!'%&)%!,),'$&)%!.(R&#.)%W!%'!:'!-,42#O#.-*)!.)$:#(&#'$*)!2)!UI'!
4)*R-!%'(!I$!,'()!#$.#*'$&'!'$!I$!*'%-%&('D!
`-$&)!*'!2)%!;M#&)%!.),)!*'!2)%!O(-.-%)%!.)$:#'$'!-4('$*'(!.)$&#$I-,'$&'!'!#$.)(4)(-(2)%!-2!4()g
.'%)!*'!-$82#%#%!J!6'%&#5$!*'!(#'%6)%D!T-!,-*I('Q!*'!I$-!)(6-$#Q-.#5$!%'!('O2'F-!'$!2-!4I2.(#&I*!J!
('-2#%,)!*'!%I!,)*'2)!*'!:-2)(!JW!.)$%'.I'$&','$&'W!'$!2-!#*)$'#*-*!*'!2-%!%-2:-6I-(*-%!*'!&)g
*)!&#4)W!*'%*'!,'*#*-%!&;.$#.-%!V-%&-!I$-!54&#,-!)(6-$#Q-.#5$D!

1.4. Organización de las guías
L%&-! :'(%#5$! <! *'! "-6'(#&! %'! V-! '%&(I.&I(-*)! '$! &('%! 2#1()%[! ;%&'W! UI'! *'%.(#1'! jL2! ";&)*)kW! I$!
m3-&82)6)!*'!L2','$&)%m!J!I$-!m^IR-!*'!`;.$#.-%mD!
L%&-!6IR-!*'%.(#1'!2-!,'&)*)2)6R-!*'%*'!&('%!8$6I2)%[!
   !"    L2!.-4R&I2)!<!*'%.(#1'!2)%!4-%)%!4-(-!('-2#Q-(!I$!-$82#%#%!*'2!'%&-*)!*'!(#'%6)!J!4-(-!6'%&#)g
         $-(!%I!,#&#6-.#5$D!L%!I$-!4('%'$&-.#5$!$'&-,'$&'!.)$.'4&I-2D!


=!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%!             !                                   486#$-!P!?*'!@ABC!
"-6'(#&!:'(%#5$!<!                                    !                                       H$&()*I..#5$!
  !"   L2!.-4R&I2)!>!*'%.(#1'!2-%!&-('-%!18%#.-%!4-(-!('-2#Q-(!I$!4()J'.&)!*'!-$82#%#%!J!6'%&#5$!*'!
       (#'%6)%W!'$&'$*#'$*)!UI'!$)!1-%&-!.)$!&'$'(!2)%!.)$.'4&)%!.2-()%W!%#$)!UI'!'%!.)$:'$#'$&'!
       4-I&-(!()2'%W!-.&#:#*-*'%W!V#&)%!J!*).I,'$&-.#5$!4-(-!UI'!2-!('-2#Q-.#5$!*'2!4()J'.&)!*'!-$8g
       2#%#%!J!6'%&#5$!*'!(#'%6)%!'%&;!1-F)!.)$&()2!'$!&)*)!,),'$&)D!
  !"   L2!.-4R&I2)!B!-42#.-!2-!,'&)*)2)6R-!-2!.-%)!*'2!*'%-(()22)!*'!%#%&',-%!*'!#$O)(,-.#5$W!'$!'2!
       '$&'$*#,#'$&)!UI'!2)%!4()J'.&)%!*'!*'%-(()22)!*'!%#%&',-%!*'1'$!&'$'(!'$!.I'$&-!2)%!(#'%g
       6)%! *'%*'! '2! 4(#,'(! ,),'$&)W! &-$&)! 2)%! (#'%6)%! -! UI'! '%&8$! 'M4I'%&)%W! .),)! 2)%! (#'%6)%!
       UI'!2-%!4()4#-%!-42#.-.#)$'%!#$&()*I.'$!'$!'2!%#%&',-D!
3),)!.),42','$&)W!'2!.-4R&I2)!A!*'%6(-$-!I$-!%'(#'!*'!-%4'.&)%!4(8.&#.)%W!*'(#:-*)%!*'!2-!'M4'g
(#'$.#-!-.I,I2-*-!'$!'2!&#',4)!4-(-!2-!('-2#Q-.#5$!*'!I$!-$82#%#%!J!I$-!6'%&#5$!('-2,'$&'!'O'.&#g
:)%D!
T)%!-4;$*#.'%!('.)6'$!,-&'(#-2!*'!.)$%I2&-[!!
  @D! I$!62)%-(#)W!!
  <D! ('O'('$.#-%!1#12#)6(8O#.-%!.)$%#*'(-*-%!4-(-!'2!*'%-(()22)!*'!'%&-!,'&)*)2)6R-W!
  >D! ('O'('$.#-%!-2!,-(.)!2'6-2!UI'!'$.I-*(-!2-%!&-('-%!*'!-$82#%#%!J!6'%&#5$W!
  BD! '2!,-(.)!$)(,-&#:)!*'!':-2I-.#5$!J!.'(&#O#.-.#5$!
  AD! 2-%!.-(-.&'(R%&#.-%!UI'!%'!('UI#'('$!*'!2-%!V'((-,#'$&-%W!4('%'$&'%!)!OI&I(-%W!4-(-!%)4)(&-(!
      '2!4().'%)!*'!-$82#%#%!J!6'%&#5$!*'!(#'%6)%W!
  GD! I$-!6IR-!.),4-(-&#:-!*'!.5,)!"-6'(#&!:'(%#5$!@!V-!':)2I.#)$-*)!'$!'%&-!:'(%#5$!<D!
/)(!I2&#,)W!%'!*'%-(()22-!I$!.-%)!4(8.&#.)!.),)!'F',42)D!

1.4.1. Modo de empleo
T)%!2'.&)('%!$I':)%!'$!2-!,-&'(#-W!*'1'$!',4'Q-(!4)(!'2!.-4R&I2)!<D!
]#!J-!V-J!I$!.)$).#,#'$&)!*'!2)%!.)$.'4&)%W!'2!'F',42)!-JI*-!-!.'$&(-(!#*'-%!J!&'(,#$)2)6R-D!
]#!%'!:-!-!2-$Q-(!I$!4()J'.&)!*'!-$82#%#%!J!6'%&#5$!*'!(#'%6)%W!'2!.-4R&I2)!>!-JI*-!-!'%&(I.&I(-(2)!J!
42-$#O#.-(2)D!]#!'2!%#%&',-!*'!#$O)(,-.#5$!'%!%#,42'!J!('*I.#*)!)!1#'$!%#!%52)!%'!('UI#'('!I$-!4(#,'g
(-!-4()M#,-.#5$W!4I'*'!1-%&-(!I$!42-$&'-,#'$&)!#$O)(,-2h!4'()!.I-$*)!'2!4()J'.&)!&),-!'$:'(6-g
*I(-!.)$:#'$'!%'(!,'&5*#.)D!
]#!%'!'%&8!('-2#Q-$*)!I$!4()J'.&)!*'!-$82#%#%!J!6'%&#5$!*'!(#'%6)%W!'2!.-4R&I2)!A!-JI*-!-!.'$&(-(!2-!
-.&#:#*-*!%#$!*#%&(-..#)$'%D!
]#!%'!:-!-!.)2-1)(-(!'$!I$!4()J'.&)!*'!*'%-(()22)!*'!I$!$I':)!%#%&',-!*'!#$O)(,-.#5$W!)!'$!I$!
.#.2)!*'!,-$&'$#,#'$&)W!.)$:#'$'!('.I((#(!-2!.-4R&I2)!BD!
]#!%'!:-!-!&(-1-F-(!.)$!%#%&',-%!V),)2)6-*)%W!1#'$!4)(UI'!#$&'('%-!.),)!,'.-$#%,)!4-(-!'%4'g
.#O#.-(!2)!UI'!%'!$'.'%#&-W!1#'$!4)(UI'!#$&'('%-!.),)!,'.-$#%,)!4-(-!'%4'.#O#.-(!2)!UI'!%'!&#'$'W!
.)$:#'$'!('.I((#(!-2!-4;$*#.'!BD!
L$!'2!42-$&'-,#'$&)!*'!'%&-%!6IR-%!%'!V-!%'6I#*)!I$!.(#&'(#)!j*'!,8M#,)%kW!('O2'F-$*)!&)*)!&#4)!*'!
-.&#:)%W!&)*)!&#4)!*'!-%4'.&)%!*'!%'6I(#*-*W!&)*)!&#4)!*'!%#&I-.#)$'%W!'$!*'O#$#&#:-D!L$!2-!4(8.&#.-W!
'2!I%I-(#)!4I'*'!'$.)$&(-(%'!-$&'!%#&I-.#)$'%!*)$*'!'2!-$82#%#%!'%!,8%!('%&(#$6#*)D!]#6I'$!-26Ig
$)%!.-%)%!4(8.&#.)%!O('.I'$&'%[!
  !"   %52)!%'!('UI#'('!I$!'%&I*#)!*'!2)%!O#.V'()%!-O'.&)%!-!2-!2'6#%2-.#5$!*'!*-&)%!*'!.-(8.&'(!4'(g
       %)$-2!
  !"   %52)!%'!('UI#'('!I$!'%&I*#)!*'!2-%!6-(-$&R-%!*'!.)$O#*'$.#-2#*-*!*'!2-!#$O)(,-.#5$!
  !"   %52)!%'!('UI#'('!I$!'%&I*#)!*'!2-!*#%4)$#1#2#*-*!*'!2)%!%'(:#.#)%!?&R4#.-,'$&'!4)(UI'!%'!1I%g
       .-!'2!*'%-(()22)!*'!I$!42-$!*'!.)$&#$6'$.#-C!
  !"   '&.D!



=!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%!            !                               486#$-!@S!?*'!@ABC!
"-6'(#&!:'(%#5$!<!                                     !                                        H$&()*I..#5$!
L%&-%!%#&I-.#)$'%W!O('.I'$&'%W!%'!('.)6'$!O)(,-2,'$&'!'$!2-%!&-('-%!*'!2-!-.&#:#*-*!+@D<!'!#$O)(g
,-2,'$&'!.),'$&-$*)!UI'!'%!.)$%&(I.&#:)!.'$&(-(%'!'$!I$!*),#$#)!('*I.#*)!'!#(!-,42#-$*)!'$!2-!
,'*#*-!*'!2-%!$'.'%#*-*'%W!-$&'%!UI'!-O()$&-(!2-!&)&-2#*-*D!!

1.4.2. El catálogo de elementos
L$!2#1()!-4-(&'W!%'!4()4)$'!I$!.-&82)6)W!-1#'(&)!-!-,42#-.#)$'%W!UI'!,-(.-!I$-%!4-I&-%!'$!.I-$&)!
-[!
   !"   &#4)%!*'!-.&#:)%!
   !"   *#,'$%#)$'%!*'!:-2)(-.#5$!*'!2)%!-.&#:)%!
   !"   .(#&'(#)%!*'!:-2)(-.#5$!*'!2)%!-.&#:)%!
   !"   -,'$-Q-%!&R4#.-%!%)1('!2)%!%#%&',-%!*'!#$O)(,-.#5$!
   !"   %-2:-6I-(*-%!-!.)$%#*'(-(!4-(-!4()&'6'(!%#%&',-%!*'!#$O)(,-.#5$!
]'!4'(%#6I'$!*)%!)1F'&#:)%[!
   @D! /)(!I$-!4-(&'W!O-.#2#&-(!2-!2-1)(!*'!2-%!4'(%)$-%!UI'!-.),'&'$!'2!4()J'.&)W!'$!'2!%'$&#*)!*'!
       )O('.'(2'%!'2','$&)%!'%&8$*-(!-!2)%!UI'!4I'*-$!-*%.(#1#(%'!(84#*-,'$&'W!.'$&(8$*)%'!'$!2)!
       '%4'.RO#.)!*'2!%#%&',-!)1F'&)!*'2!-$82#%#%D!
   <D! /)(!)&(-W!V),)6'$'#Q-(!2)%!('%I2&-*)%!*'!2)%!-$82#%#%W!4(),):#'$*)!I$-!&'(,#$)2)6R-!J!I$)%!
       .(#&'(#)%!I$#O)(,'%!UI'!4'(,#&-$!.),4-(-(!'!#$.2I%)!#$&'6(-(!-$82#%#%!('-2#Q-*)%!4)(!*#O'('$g
       &'%!'UI#4)%D!
3-*-!%'..#5$!#$.2IJ'!I$-!$)&-.#5$!n"T!UI'!%'!',42'-(8!4-(-!4I12#.-(!('6I2-(,'$&'!2)%!'2','$g
&)%!'$!I$!O)(,-&)!'%&8$*-(!.-4-Q!*'!%'(!4().'%-*)!-I&),8&#.-,'$&'!4)(!V'((-,#'$&-%!*'!-$82#%#%!
J!6'%&#5$D!
]#! '2! 2'.&)(! I%-! I$-! V'((-,#'$&-! *'! -$82#%#%! J! 6'%&#5$! *'! (#'%6)%W! '%&'! .-&82)6)!%'(8!4-(&'!*'!2-!
,#%,-h!%#!'2!-$82#%#%!%'!('-2#Q-!,-$I-2,'$&'W!'%&'!.-&82)6)!4()4)(.#)$-!I$-!-,42#-!1-%'!*'!4-(&#g
*-!4-(-!-:-$Q-(!(84#*-,'$&'!%#$!*#%&(-..#)$'%!$#!)2:#*)%D!

1.4.3. La guía de técnicas
L$!2#1()!-4-(&'W!-4)(&-!2IQ!-*#.#)$-2!J!6IR-%!%)1('!-26I$-%!&;.$#.-%!UI'!%'!',42'-$!V-1#&I-2,'$&'!
4-(-!22':-(!-!.-1)!4()J'.&)%!*'!-$82#%#%!J!6'%&#5$!*'!(#'%6)%[!
   !"   &;.$#.-%!'%4'.RO#.-%!4-(-!'2!-$82#%#%!*'!(#'%6)%!
        !"   -$82#%#%!,'*#-$&'!&-12-%!
        !"   -$82#%#%!-26)(R&,#.)!
        !"   8(1)2'%!*'!-&-UI'!
   !"   &;.$#.-%!6'$'(-2'%!
        !"   -$82#%#%!.)%&'g1'$'O#.#)!
        !"   *#-6(-,-%!*'!O2IF)!*'!*-&)%!
        !"   *#-6(-,-%!*'!4().'%)%!
        !"   &;.$#.-%!6(8O#.-%!
        !"   42-$#O#.-.#5$!*'!4()J'.&)%!
        !"   %'%#)$'%!*'!&(-1-F)[!'$&(':#%&-%W!('I$#)$'%!J!4('%'$&-.#)$'%!
        !"   :-2)(-.#5$!'24V#!
]'! &(-&-! *'! I$-! 6IR-! *'! .)$%I2&-D! ]'60$!'2!2'.&)(!-:-$.'!4)(!2-!&-('-%!*'2!4()J'.&)W!%'!2'!('.)g
,'$*-(8!'2!I%)!*'!.#'(&-%!&;.$#.-%!'%4'.RO#.-%W!*'!2-%!UI'!'%&-!6IR-!1I%.-!%'(!I$-!#$&()*I..#5$W!
-%R!.),)!4()4)(.#)$-(!('O'('$.#-%!4-(-!UI'!'2!2'.&)(!4()OI$*#.'!'$!2-%!&;.$#.-%!4('%'$&-*-%D!


=!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%!             !                                 486#$-!@@!?*'!@ABC!
"-6'(#&!:'(%#5$!<!                                      !                                         H$&()*I..#5$!

1.5. Para los que han trabajado con Magerit v1.0
]#!I%&'*!V-!&(-1-F-*)!.)$!"-6'(#&!:@DSW!&)*)%!2)%!.)$.'4&)%!2'!('%I2&-(8$!O-,#2#-('%W!-I$UI'!V-J!
.#'(&-! ':)2I.#5$D! L$! 4-(&#.I2-(! ('.)$).'(8! 2)! UI'! %'! *'$),#$-1-! %I1,)*'2)! *'! '2','$&)%[! -.&#g
:)%W!-,'$-Q-%W!:I2$'(-1#2#*-*'%W!#,4-.&)%W!(#'%6)%!J!%-2:-6I-(*-%D!L%&-!4-(&'!.)$.'4&I-2!V-!%#*)!
('O('$*-*-!4)(!'2!4-%)!*'2!&#',4)!J!%#6I'!%#'$*)!'2!'F'!-2('*'*)(!*'2!.I-2!%'!:'(&'1(-$!2-%!!O-%'%!
OI$*-,'$&-2'%!*'!-$82#%#%!J!6'%&#5$D!]'!V-!.)(('6#*)!J!-,42#-*)!2)!UI'!%'!*'$),#$-1-!j%I1'%&-g
*)%!*'!%'6I(#*-*k!*8$*)2'!'2!$I':)!$),1('!*'!j*#,'$%#)$'%k B!'!#$&()*I.#'$*)!$I':-%!:-(-%!*'!
,'*#(!2)!UI'!#$&'('%-!*'!2)%!-.&#:)%D!L2!%I1,)*'2)!*'!4().'%)%!-4-('.'!1-F)!'2!'4R6(-O'!*'!j'%g
&(I.&I(-.#5$!*'2!4()J'.&)!*'!-$82#%#%!J!6'%&#5$!*'!(#'%6)%kD!
]#! 1#'$! "-6'(#&! :@DS! V-! ('%#%&#*)! 1#'$! '2! 4-%)! *'2! &#',4)! '$! 2)! .)$.'4&I-2W! $)! %'! 4I'*'!*'.#(!2)!
,#%,)!*'!2)%!*'&-22'%!&;.$#.)%!*'!2)%!%#%&',-%!*'!#$O)(,-.#5$!.)$!2)%!UI'!%'!&(-1-F-D!]'!#$&'$&-!
I$-! 4I'%&-! -2! *R-h! 4'()! -$&'! &)*)! %'! #$&'$&-! *#O'('$.#-(! 2)! UI'! '%! '%'$.#-2! ?J!4'(,-$'$&'C!*'!2)!
UI'!'%!.)JI$&I(-2!J!.-,1#-(8!.)$!'2!&#',4)D!L%&)!%'!&(-*I.'!'$!4-(-,'&(#Q-(!'2!,;&)*)!*'!&(-1-F)W!
('O'('$.#8$*)2)! -! .-&82)6)%! 'M&'($)%! *'! -,'$-Q-%! J! %-2:-6I-(*-%! UI'! %'! 4)*(8$! -.&I-2#Q-(W!
-*-4&8$*)%'!-2!4-%)!*'2!&#',4)W!&-$&)!4)(!4()6('%)!&'.$)256#.)!.),)!4)(!4()6('%)!*'!2)%!%IF'&)%W!
4I'%!&-$!.#'(&)!'%!UI'!2)%!%#%&',-%!.-,1#-$!.),)!UI'!2)!V-.'$!2)%!%IF'&)%!-!%I!-2('*'*)(W!1I'g
$)%!J!,-2)%D!oW!.I-$&)!,8%!;M#&)!&'$6-$!2)%!%#%&',-%W!,8%!I%I-(#)%!&'$*(8$!J!%#,I2&8$'-,'$&'W!
,8%!%IF'&)%!V-1(8!#$&'('%-*)%!'$!-1I%-(!*'!'22)%!)W!%#,42','$&'W!*'%&(I#(2)%D!+%R!4I'%W!UI'*'!'2!
,;&)*)W!-1#'(&)!*'!O)(,-!UI'!'%&-$*)!.2-()!UI;!%'!V-.'!J!.5,)W!%'!4I'*-$!-*-4&-(!2)%!*'&-22'%!-!
.-*-!,),'$&)D!
+! 'O'.&)%! 4(8.&#.)%W! '2! 48((-O)! -$&'(#)(! %'! &(-*I.'! '$! UI'! %'! V-! %'6('6-*)! '$! I$! 2#1()! -$'F)W!
j3-&82)6)! *'! L2','$&)%kW! 2)%! &#4)%! *'! -.&#:)%W! 2-%! *#,'$%#)$'%! J! .(#&'(#)%! *'! :-2)(-.#5$W! '2!
.-&82)6)!*'!-,'$-Q-%!J!'2!.-&82)6)!*'!%-2:-6I-(*-%W!*'!&-2!O)(,-!UI'!4I'*-$!':)2I.#)$-(D!
L2!-4;$*#.'!G!'%!,8%!4('.#%)!'%&-12'.#'$*)!2-%!.)(('%4)$*'$.#-%!'$&('!2-!:'(%#5$!@DS!J!'%&-D!

1.6. Evaluación, certificación, auditoría y acreditación
L2!-$82#%#%!*'!(#'%6)%!'%!I$-!4#'*(-!-$6I2-(!*'!2)%!4().'%)%!*'!':-2I-.#5$W!.'(&#O#.-.#5$W!-I*#&)(R-!
J!-.('*#&-.#5$!UI'!O)(,-2#Q-$!2-!.)$O#-$Q-!UI'!,'('.'!I$!%#%&',-!*'!#$O)(,-.#5$D!-*)!UI'!$)!
V-J!*)%!%#%&',-%!*'!#$O)(,-.#5$!#6I-2'%W!2-!':-2I-.#5$!*'!.-*-!%#%&',-!.)$.('&)!('UI#'('!-,)2g
*-(%'!-!2)%!.),4)$'$&'%!UI'!2)!.)$%&#&IJ'$D!L$!-$82#%#%!*'!(#'%6)%!4()4)(.#)$-!I$-!:#%#5$!%#$6Ig
2-(! *'! .5,)! '%! .-*-! %#%&',-W! UI;! :-2)(! 4)%''W! -! UI;! -,'$-Q-%! '%&8! 'M4I'%&)! J! *'! UI;! %-2:-g
6I-(*-%!%'!V-!*)&-*)D!L%!4I'%!'2!-$82#%#%!*'!(#'%6)%!4-%)!)12#6-*)!4-(-!4)*'(!22':-(!-!.-1)!&)*-%!
2-%!&-('-%!,'$.#)$-*-%W!UI'!%'!('2-.#)$-$!%'60$!'2!%#6I#'$&'!'%UI',-[!




                                                                                           !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
                                               !
B! #,'$%#5$W!'$!I$-!*'!2-%!-.'4.#)$'%!*'2!#..#)$-(#)!*'!2-!T'$6I-!L%4-c)2-W!*R.'%'!UI'!'%!j3-*-!I$-!
   *'!2-%!,-6$#&I*'%!*'!I$!.)$FI$&)!UI'!%#(:'$!4-(-!*'O#$#(!I$!O'$5,'$)D!/)(!'F',42)W!'2!'%4-.#)!*'!.I-&()!
   *#,'$%#)$'%!*'!2-!&')(R-!*'!2-!('2-&#:#*-*Dk!
=!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%!              !                                 486#$-!@<!?*'!@ABC!
"-6'(#&!:'(%#5$!<!                                       !                                          H$&()*I..#5$!
L$!'%&-!%'..#5$!%'!V-.'!I$-!4('%'$&-.#5$!.)$.'4&I-2!*'!2-%!-.&#:#*-*'%!.#&-*-%D!L2!2'.&)(!'$.)$g
&(-(8!'$!'2!-4;$*#.'!B!I$!&(-&-,#'$&)!'%4'.RO#.)!*'!2)%!,-(.)%!$)(,-&#:)%!('2-&#:)%!-!%#%&',-%!*'!
6'%&#5$!J!4()*I.&)%!*'!%'6I(#*-*D!

Evaluación
L%! .-*-! :'Q! ,8%! O('.I'$&'! 2-! ':-2I-.#5$! *'! 2-! %'6I(#*-*! *'! 2)%! %#%&',-%! *'! #$O)(,-.#5$W! &-$&)!
#$&'($-,'$&'! .),)! 4-(&'! *'! 2)%! 4().'%)%! *'! 6'%&#5$W! .),)! 4)(! ,'*#)! *'! ':-2I-*)('%! #$*'4'$g
*#'$&'%!'M&'($)%D!T-%!':-2I-.#)$'%!4'(,#&'$!,'*#(!'2!6(-*)!*'!.)$O#-$Q-!UI'!,'('.'!)!#$%4#(-!I$!
%#%&',-!*'!#$O)(,-.#5$D!!

Certificación
T-!':-2I-.#5$!4I'*'!22':-(!-!I$-!.'(&#O#.-.#5$!)!('6#%&()!*'!2-!%'6I(#*-*!*'2!%#%&',-D!L$!2-!4(8.&#.-!
%'!.'(&#O#.-$!4()*I.&)%!J!%'!.'(&#O#.-$!%#%&',-%!*'!6'%&#5$!*'!2-!%'6I(#*-*D!T-!.'(&#O#.-.#5$!*'!4()g
*I.&)%!'%W!*'!-26I$-!O)(,-W!#,4'(%)$-2[!j'%&)!&#'$'!'%&-%!.-(-.&'(R%&#.-%!&;.$#.-%kD!]#$!',1-(6)W!
2-!.'(&#O#.-.#5$!*'!%#%&',-%!*'!6'%&#5$!&#'$'!UI'!:'(!.)$!'2!j.),4)$'$&'!VI,-$)k!*'!2-%!)(6-$#Q-g
.#)$'%!1I%.-$*)!'2!-$82#%#%!*'!.5,)!%'!'M42)&-$!2)%!%#%&',-% AD!!
3'(&#O#.-(! '%! -%'6I(-(! ('%4)$%-12','$&'! J! 4)(! '%.(#&)! I$! .),4)(&-,#'$&)D! T)! UI'! %'! .'(&#O#.-W!
4()*I.&)!)!%#%&',-W!%'!%),'&'!-!I$-!%'(#'!*'!':-2I-.#)$'%!)(#'$&-*-%!4)(!I$!)1F'&#:)!X4-(-!UI;!
2)!UI#'('Y GD!9$!.'(&#O#.-*)!*#.'!UI'!I$!%#%&',-!'%!.-4-Q!*'!4()&'6'(!I$)%!*-&)%!*'!I$-%!-,'$-g
Q-%! .)$! I$-! .#'(&-! .-2#*-*! ?.-4-.#*-*! *'! 4()&'..#5$CD! o! 2)! *#.'! '$! 1-%'! -! UI'! V-! )1%'(:-*)! 2-!
'M#%&'$.#-!J!'2!OI$.#)$-,#'$&)!*'!I$-!%'(#'!*'!%-2:-6I-(*-%D!L%!*'.#(!UI'!*'&(8%!*'!I$!.'(&#O#.-*)!
$)!V-J!%#$)!2)%!.)$.'4&)%!*'!I$!-$82#%#%!*'!(#'%6)%D!
+$&'%!*'!4().'*'(!-!2-!.'(&#O#.-.#5$W!*'1'!V-1'(%'!('-2#Q-*)!I$!-$82#%#%!*'!(#'%6)%!-!O#$!*'!.)$)g
.'(!2)%!(#'%6)%!J!*'!.)$&()2-(2)%!,'*#-$&'!2-!-*)4.#5$!*'!2)%!.)$&()2'%!-*'.I-*)%W!-*',8%W!%'(8!
I$!4I$&)!*'!.)$&()2!*'!2-!6'%&#5$!*'2!4()*I.&)!)!%#%&',-D!

Acreditación
+26I$-%! .'(&#O#.-.#)$'%!&#'$'$!.),)!)1F'&#:)!2-!-.('*#&-.#5$!*'2!4()*I.&)!)!%#%&',-D!T-!-.('*#&-g
.#5$!'%!I$!4().'%)!'%4'.RO#.)!.IJ)!)1F'&#:)!'%!2'6#&#,-(!-2!%#%&',-!4-(-!O)(,-(!4-(&'!*'!%#%&',-%!
,8%!-,42#)%D!]'!4I'*'!:'(!.),)!I$-!.'(&#O#.-.#5$!4-(-!I$!4()45%#&)!'%4'.RO#.)D!

Auditorías
+I$UI'!$)!%'-!2)!,#%,)W!$)!'%&8$!,IJ!2'F)%!*'!'%&'!,I$*)!2-%!-I*#&)(R-%W!#$&'($-%!)!'M&'($-%W!-!
2-%!UI'!%'!%),'&'$!2)%!%#%&',-%!*'!#$O)(,-.#5$!
     !"    I$-%!:'.'%!('UI'(#*-%!4)(!2'J!4-(-!4)*'(!)4'(-(!'$!I$!.#'(&)!%'.&)(W!!
     !"    )&(-%!:'.'%!('UI'(#*-%!4)(!2-!4()4#-!#('..#5$!*'!2-!E(6-$#Q-.#5$W!!
     !"    )&(-%!:'.'%!('UI'(#*-%!4)(!'$&#*-*'%!.)2-1)(-*)(-%!UI'!:'$!%I!4()4#)!$#:'2!*'!(#'%6)!2#6-g
           *)!-2!$I'%&()D!!
9$-!-I*#&)(R-!4I'*'!%'(:#(%'!*'!I$!-$82#%#%!*'!(#'%6)%!UI'!2'!4'(,#&-!?@C!%-1'(!UI;!V-J!'$!FI'6)W!
?<C!%-1'(!-!UI;!'%&8!'M4I'%&)!'2!%#%&',-!J!?>C!:-2)(-(!2-!'O#.-.#-!J!'O#.#'$.#-!*'!2-%!%-2:-6I-(*-%D!
e('.I'$&','$&'W!2)%!-I*#&)('%!4-(&'$!*'!I$!-$82#%#%!*'!(#'%6)%W!#,42R.#&)!)!'M42R.#&)W!UI'W!)!1#'$!!
('-2#Q-$!'22)%!,#%,)%W!)!1#'$!2)!-I*#&-$D!]#',4('!'$!2-!4(#,'(-!O-%'!*'!2-!-I*#&)(R-W!4I'%!'%!*#OR.#2!
)4#$-(!*'!2)!UI'!$)!%'!.)$).'D!+!4-(&#(!*'2!-$82#%#%!*'!(#'%6)%!%'!4I'*'!-$-2#Q-(!'2!%#%&',-!'!#$g
O)(,-(!-!2-!6'('$.#-!*'!%#!'2!%#%&',-!'%&8!1-F)!.)$&()2h!'%!*'.#(W!%#!2-%!,'*#*-%!*'!%'6I(#*-*!-*)4g

                                               !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
A! i-J! :'VR.I2)%! .)$! -2&-%! .-2#O#.-.#)$'%! &;.$#.-%! J! )&()%! ,8%! VI,#2*'%D! T)! ,#%,)! UI'! V-J! .)$*I.&)('%!
   UI'!%)$!:'(*-*'()%!4()O'%#)$-2'%!J!)&()%!*'!2)%!UI'!$I$.-!$)%!'M42#.-(',)%!.5,)!'%!UI'!'%&8$!.'(&#O#g
   .-*)%!.),)!j-4&)%!4-(-!'2!,-$'F)!*'!:'VR.I2)%kD!!T)!#*'-2!'%!4)$'(!I$!6(-$!.).V'!'$!,-$)%!*'!I$!6(-$!
   .)$*I.&)(D! '! -VR! 4-(-! -1-F)W! &'$',)%! I$-! 6(-$! :-(#'*-*! *'! %#&I-.#)$'%! *'! ,'$)(! .)$O#-$Q-[! ,-J)(!
   (#'%6)!*'!UI'!-26)!:-J-!,-2D!
G! o!-%R!&'$',)%!%#%&',-%!-4&)%!4-(-!j.)$%I,)!VI,-$)k!)!jI&#2#Q-.#5$!'$!.)$*#.#)$'%!&;(,#.-%!'M&(',-%kD!
=!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%!               !                                   486#$-!@>!?*'!@ABC!
"-6'(#&!:'(%#5$!<!                                      !                                         H$&()*I..#5$!
&-*-%!'%&8$!FI%&#O#.-*-%W!#,42-$&-*-%!J!,)$#&)(#Q-*-%W!*'!O)(,-!UI'!%'!4I'*'!.)$O#-(!'$!'2!%#%&'g
,-!*'!#$*#.-*)('%!*'!UI'!*#%4)$'!2-!6'('$.#-!4-(-!6'%&#)$-(!2-!%'6I(#*-*!*'!2)%!%#%&',-%D!
T-!.)$.2I%#5$!*'!2-!-I*#&)(R-!'%!I$!#$O)(,'!*'!#$%IO#.#'$.#-%!*'&'.&-*-%W!UI'!$)!%)$!%#$)!#$.)V'g
('$.#-%!'$&('!2-%!$'.'%#*-*'%!#*'$&#O#.-*-%!'$!'2!-$82#%#%!*'!(#'%6)%!J!2-!('-2#*-*!*'&'.&-*-!*I(-$g
&'!2-!#$%4'..#5$!*'2!%#%&',-!'$!)4'(-.#5$D!!
        L2!#$O)(,'!*'!-I*#&)(R-!*'1'(8!*#.&-,#$-(!%)1('!2-!-*'.I-.#5$!*'!2-%!,'*#*-%!J!.)$&()2'%!-2!
        4('%'$&'! Z'62-,'$&)W! #*'$&#O#.-(! %I%! *'O#.#'$.#-%! J! 4()4)$'(! 2-%! ,'*#*-%! .)(('.&)(-%! )!
        .),42','$&-(#-%!$'.'%-(#-%D!'1'(8W!#6I-2,'$&'W!#$.2I#(!2)%!*-&)%W!V'.V)%!J!)1%'(:-.#)$'%!
        '$!UI'!%'!1-%'$!2)%!*#.&8,'$'%!-2.-$Q-*)%!J!('.),'$*-.#)$'%!4()4I'%&-%D!pZ!PPBd@PPPW!
        -(&R.I2)!@KD<q!
L$!'2!.-%)!*'!2-!+*,#$#%&(-.#5$!4012#.-W!'M#%&'$!-26I$)%!('O'('$&'%!OI$*-,'$&-2'%!('%4'.&)!*'!2)%!
.I-2'%!%'!4I'*'!J!%'!*'1'!('-2#Q-(!-I*#&)(R-%[!
   !"   Z'-2!'.('&)!PPBd@PPPW!*'!@@!*'!FI$#)W!4)(!'2!UI'!%'!-4(I'1-!'2!Z'62-,'$&)!*'!,'*#*-%!*'!
        %'6I(#*-*!*'!2)%!O#.V'()%!-I&),-&#Q-*)%!UI'!.)$&'$6-$!*-&)%!*'!.-(8.&'(!4'(%)$-2D!
   !"   j3(#&'(#)%!*'!%'6I(#*-*W!$)(,-2#Q-.#5$!J!.)$%'(:-.#5$!*'!2-%!-42#.-.#)$'%!I&#2#Q-*-%!4-(-!'2!
        'F'(.#.#)!*'!4)&'%&-*'%kW!"+/W!<SSB!
T-%!-I*#&)(R-%!*'1'$!('4'&#(%'!('6I2-(,'$&'!&-$&)!4-(-!%'6I#(!2-!':)2I.#5$!*'2!-$82#%#%!*'!(#'%6)%!
?UI'! %'! *'1'! -.&I-2#Q-(! ('6I2-(,'$&'C! .),)! 4-(-! %'6I#(! '2! *'%-(()22)! *'2! 42-$! *'! %'6I(#*-*! *'g
&'(,#$-*)!4)(!2-%!-.&#:#*-*'%!*'!6'%&#5$!*'!(#'%6)%D!

1.7. ¿Cuándo procede analizar y gestionar los riesgos?
Z'-2#Q-(!I$!-$82#%#%!*'!(#'%6)%!'%!2-1)(#)%)!J!.)%&)%)D!T':-$&-(!I$!,-4-!*'!-.&#:)%!J!:-2)(-(2)%!
('UI#'('!2-!.)2-1)(-.#5$!*'!,I.V)%!4'(O#2'%!*'$&()!*'!2-!E(6-$#Q-.#5$W!*'%*'!2)%!$#:'2'%!*'!6'g
('$.#-!V-%&-!2)%!&;.$#.)%D!o!$)!%)2)!'%!UI'!V-J-!UI'!#$:)2I.(-(!-!,I.V-%!4'(%)$-%W!%#$)!UI'!V-J!
UI'! 2)6(-(! I$-! I$#O)(,#*-*! *'! .(#&'(#)! '$&('! &)*)%! 4I'%W! %#! #,4)(&-$&'! '%! .I-$&#O#.-(! 2)%! (#'%6)%W!
,8%!#,4)(&-$&'!-0$!'%!('2-&#:#Q-(2)%D!o!'%&)!'%!-%R!4)(UI'!&R4#.-,'$&'!'$!I$!-$82#%#%!*'!(#'%6)%!
-4-('.'$!,I2&#&I*!*'!*-&)%D!T-!0$#.-!O)(,-!*'!-O()$&-(!2-!.),42'F#*-*!'%!.'$&(-(%'!'$!2)!,8%!#,g
4)(&-$&'!?,8M#,)!#,4-.&)W!,8M#,)!(#'%6)C!J!)1:#-(!2)!UI'!'%!%'.I$*-(#)!)!#$.2I%)!*'%4('.#-12'D!
/'()!%#!2)%!*-&)%!$)!'%&8$!1#'$!)(*'$-*)%!'$!&;(,#$)%!('2-&#:)%W!%I!#$&'(4('&-.#5$!'%!#,4)%#12'D!
L$!('%I,'$W!UI'!I$!-$82#%#%!*'!(#'%6)%!$)!'%!I$-!&-('-!,'$)(!UI'!('-2#Q-!.I-2UI#'(-!'$!%I%!(-&)%!
2#1('%D!L%!I$-!&-('-!,-J)(!UI'!('UI#'('!'%OI'(Q)!J!.))(*#$-.#5$D!/)(!&-$&)!*'1'!%'(!42-$#O#.-*-!J!
FI%&#O#.-*-D!
9$!-$82#%#%!*'!(#'%6)%!'%!('.),'$*-12'!'$!.I-2UI#'(!E(6-$#Q-.#5$!UI'!*'4'$*-!*'!2)%!%#%&',-%!
*'! #$O)(,-.#5$! J! .),I$#.-.#)$'%! 4-(-! '2! .I,42#,#'$&)! *'! %I! ,#%#5$D! L$! 4-(&#.I2-(! '$! .I-2UI#'(!
'$&)($)!*)$*'!%'!4(-.&#UI'!2-!&(-,#&-.#5$!'2'.&(5$#.-!*'!1#'$'%!J!%'(:#.#)%W!%'-!'$!.)$&'M&)!4012#g
.)!)!4(#:-*)D!L2!-$82#%#%!*'!(#'%6)%!4'(,#&'!&),-(!*'.#%#)$'%!*'!#$:'(%#5$!'$!&'.$)2)6R-W!*'%*'!2-!
-*UI#%#.#5$!*'!'UI#4)%!*'!4()*I..#5$!V-%&-!'2!*'%42#'6I'!*'!I$!.'$&()!-2&'($-&#:)!4-(-!-%'6I(-(!
2-!.)$&#$I#*-*!*'!2-!-.&#:#*-*W!4-%-$*)!4)(!2-%!*'.#%#)$'%!*'!-*UI#%#.#5$!*'!%-2:-6I-(*-%!&;.$#.-%!
J!*'!%'2'..#5$!J!.-4-.#&-.#5$!*'2!4'(%)$-2D!
L2!-$82#%#%!*'!(#'%6)%!'%!I$-!V'((-,#'$&-!*'!6'%&#5$!UI'!4'(,#&'!&),-(!*'.#%#)$'%D!T-%!*'.#%#)$'%!
4I'*'$!&),-(%'!-$&'%!*'!*'%42'6-(!I$!%'(:#.#)!)!.)$!;%&'!OI$.#)$-$*)D!L%!,IJ!*'%'-12'!V-.'(2)!
-$&'%W!*'!O)(,-!UI'!2-%!,'*#*-%!UI'!V-J-!UI'!&),-(!%'!#$.)(4)('$!'$!'2!*#%'c)!*'2!%'(:#.#)W!'$!2-!
'2'..#5$!*'!.),4)$'$&'%W!'$!'2!*'%-(()22)!*'!2-%!-42#.-.#)$'%!J!'$!2)%!,-$I-2'%!*'!I%I-(#)D!`)*)!
2)! UI'! %'-! .)(('6#(! (#'%6)%! #,4(':#%&)%! '%! .)%&)%)! '$! &#',4)! 4()4#)! J! -F'$)W! 2)! UI'! 4I'*'! #(! '$!
*'&(#,'$&)!*'!2-!#,-6'$!4('%&-*-!4)(!2-!E(6-$#Q-.#5$!J!4I'*'!%I4)$'(W!'$!02&#,)!'M&(',)W!2-!4;(g
*#*-!*'!.)$O#-$Q-!'$!%I!.-4-.#*-*D!]#',4('!%'!V-!*#.V)!UI'!'%!,'F)(!4(':'$#(!UI'!.I(-(!J!-UIR!
%'!-42#.-[!$)!'%4'('!-!UI'!I$!%'(:#.#)!V-6-!-6I-h!V-J!UI'!4(':'(!J!'%&-(!4(':'$#*)D!

Por precepto legal
L2! -$82#%#%! *'! (#'%6)%! 4I'*'! :'$#(! ('UI'(#*)! 4)(! 4('.'4&)! 2'6-2D! `-2! '%!'2!.-%)!*'2!Z'-2!'.('&)!
<G>d@PPGW!*'!@G!*'!e'1('()W!4)(!'2!UI'!%'!('6I2-!2-!I&#2#Q-.#5$!*'!&;.$#.-%!'2'.&(5$#.-%W!#$O)(,8&#g
.-%!J!&'2',8&#.-%!4)(!2-!+*,#$#%&(-.#5$!^'$'(-2!*'2!L%&-*)D!L$!%I!-(&R.I2)!B!?^-(-$&R-%!6'$'(-2'%!
=!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%!             !                                 486#$-!@B!?*'!@ABC!
"-6'(#&!:'(%#5$!<!                                    !                                       H$&()*I..#5$!
*'!2-!I&#2#Q-.#5$!*'!%)4)(&'%W!,'*#)%!J!-42#.-.#)$'%!'2'.&(5$#.-%W!#$O)(,8&#.-%!J!&'2',8&#.-%C!*#.'!
-%R[!
    <D!3I-$*)!%'!I&#2#.'$!2)%!%)4)(&'%W!,'*#)%!J!-42#.-.#)$'%!('O'(#*)%!'$!'2!-4-(&-*)!-$&'(#)(W!%'!
       -*)4&-(8$!2-%!,'*#*-%!&;.$#.-%!J!*'!)(6-$#Q-.#5$!$'.'%-(#-%!UI'!-%'6I('$!2-!-I&'$&#.#*-*W!
       .)$O#*'$.#-2#*-*W! #$&'6(#*-*W! *#%4)$#1#2#*-*! J! .)$%'(:-.#5$! *'! 2-! #$O)(,-.#5$D! #.V-%! ,'*#g
       *-%!*'!%'6I(#*-*!*'1'(8$!&'$'(!'$!.I'$&-!'2!'%&-*)!*'!2-!&'.$)2)6R-!J!%'(!4()4)(.#)$-*-%!-!
       2-!$-&I(-2'Q-!*'!2)%!*-&)%!J!*'!2)%!&(-&-,#'$&)%!J!-!los riesgos a los que estén expuestos KD!
'!O)(,-!%#,#2-(W!'$!2-!T'J!E(68$#.-!@Ad@PPPW!*'!@>!*'!*#.#',1('W!*'!4()&'..#5$!*'!*-&)%!*'!.-g
(8.&'(!4'(%)$-2W!'$!%I!-(&R.I2)!P!?]'6I(#*-*!*'!2)%!*-&)%C!*#.'!-%R[!
    @D!L2!('%4)$%-12'!*'2!O#.V'()W!JW!'$!%I!.-%)W!'2!'$.-(6-*)!*'2!&(-&-,#'$&)W!*'1'(8$!-*)4&-(!2-%!
       ,'*#*-%!*'!R$*)2'!&;.$#.-!J!)(6-$#Q-&#:-%!$'.'%-(#-%!UI'!6-(-$&#.'$!2-!%'6I(#*-*!*'!2)%!*-g
       &)%!*'!.-(8.&'(!4'(%)$-2!J!':#&'$!%I!-2&'(-.#5$W!4;(*#*-W!&(-&-,#'$&)!)!-..'%)!$)!-I&)(#Q-*)W!
       V-1#*-! .I'$&-! *'2! '%&-*)! *'! 2-! &'.$)2)6R-W! 2-! $-&I(-2'Q-! *'! 2)%! *-&)%! -2,-.'$-*)%! J! los
       riesgos a que están expuestos,!J-!4():'$6-$!*'!2-!-..#5$!VI,-$-!)!*'2!,'*#)!OR%#.)!)!$-&Ig
       (-2D!
`'M&)!UI'!%'!('.)6'!*'!$I':)!'$!'2!4('8,1I2)!-2!ZL+T!L3ZL`E!PPBd@PPPW!*'!@@!*'!FI$#)W!4)(!
'2! UI'! %'! -4(I'1-! '2! Z'62-,'$&)! *'! ,'*#*-%! *'! %'6I(#*-*! *'! 2)%! O#.V'()%! -I&),-&#Q-*)%! UI'!
.)$&'$6-$!*-&)%!*'!.-(8.&'(!4'(%)$-2D!L$!'%&'!*'.('&)!%'!('.)6'!2-!)12#6-.#5$!*'!'2-1)(-(!I$!*)g
.I,'$&)!*'!%'6I(#*-*!
    @D!L2!('%4)$%-12'!*'2!O#.V'()!'2-1)(-(8!'!#,42-$&-(8!2-!$)(,-&#:-!*'!%'6I(#*-*!,'*#-$&'!I$!*)g
       .I,'$&)!*'!)12#6-*)!.I,42#,#'$&)!4-(-!'2!4'(%)$-2!.)$!-..'%)!-!2)%!*-&)%!-I&),-&#Q-*)%!
       *'!.-(8.&'(!4'(%)$-2!J!-!2)%!%#%&',-%!*'!#$O)(,-.#5$D!!
#OR.#2,'$&'!%'!4I'*'!*'%-(()22-(!*#.V)!*).I,'$&)!%#$!I$!-$82#%#%!4(':#)!*'!2)%!(#'%6)%!%)1('!2)%!
*-&)%W!-$82#%#%!UI'!$)%!22':'!-!*'&'(,#$-(!2-%!,'*#*-%!*'!%'6I(#*-*!4'(&#$'$&'%D!

Certificación y acreditación
]#!'2!%#%&',-!-%4#(-!-!I$-!.'(&#O#.-.#5$W!'2!-$82#%#%!*'!(#'%6)%!'%!I$!('UI#%#&)!4(':#)!UI'!'M#6#(8!'2!
':-2I-*)(D!L%!2-!OI'$&'!*'!#$O)(,-.#5$!4-(-!*'&'(,#$-(!2-!('2-.#5$!*'!.)$&()2'%!4'(&#$'$&'%!4-(-!'2!
%#%&',-!J!UI'!4)(!&-$&)!*'1'$!%'(!#$%4'..#)$-*)%D!_;-%'!'2!-4;$*#.'!BD@!%)1('!.'(&#O#.-.#5$!*'!
%#%&',-%!*'!6'%&#5$!*'!2-!%'6I(#*-*!*'!2-!#$O)(,-.#5$!?]^]HCD!
L2!-$82#%#%!*'!(#'%6)%!'%!-%R!,#%,)!I$!('UI#%#&)!'M#6#*)!'$!2)%!4().'%)%!*'!-.('*#&-.#5$ N!*'!%#%&'g
,-%D!L%&)%!4().'%)%!%)$!$'.'%-(#)%!.I-$*)!%'!:-!-!,-$'F-(!'$!'2!%#%&',-!#$O)(,-.#5$!.2-%#O#.-*-!
$-.#)$-2W!9LW!E`+7!)!*'!)&()%!-.I'(*)%!#$&'($-.#)$-2'%D!L2!4(#,'(!4-%)!*'2!4().'%)!'%!2-!('-2#Q-g
.#5$!*'2!-$82#%#%!*'!(#'%6)%!UI'!#*'$&#O#UI'!-,'$-Q-%!J!%-2:-6I-(*-%!J!6'%&#)$'!%-&#%O-.&)(#-,'$g
&'!2)%!(#'%6)%!*'2!%#%&',-D!!
/)(!02&#,)W!.-1'!,'$.#)$-(!'2!',42')!*'!4'(O#2'%!*'!4()&'..#5$!.),)!,'.-$#%,)!*'!.)$&(-&-.#5$D!
T)%!4'(O#2'%!*'!4()&'..#5$!?H]EdHL3g@ABSNC!$-.'$!.)$!2-!*)12'!,#%#5$!*'!4)*'(!'%4'.#O#.-(!-!4(#)(#!!
2)%!('UI#%#&)%!*'!%'6I(#*-*!*'!I$!%#%&',-!?4-(-!%I!-*UI#%#.#5$!)!*'%-(()22)C!J!4)*'(!%'(:#(!*'!('O'g
('$.#-!#$&'($-.#)$-2!*'2!%#6$#O#.-*)!*'!I$-!.'(&#O#.-.#5$D!L$!I$)!I!)&()!.-%)W!'%&-12'.'!2-!j:-(-!*'!
,'*#(k!('%4'.&)!*'!2-!UI'!%'!.-2#O#.-(8!2-!#*)$'#*-*!*'!2-!%'6I(#*-*!*'2!%#%&',-D!_;-%'!'2!-4;$*#.'!
BD<!%)1('!.(#&'(#)%!.),I$'%!*'!':-2I-.#5$!?33CD!

En conclusión
/().'*'!-$-2#Q-(!J!6'%&#)$-(!2)%!(#'%6)%!.I-$*)!*#('.&-!)!#$*#('.&-,'$&'!2)!'%&-12'Q.-!I$!4('.'4g
&)!2'6-2!J!%#',4('!UI'!2)!('UI#'(-!2-!4()&'..#5$!('%4)$%-12'!*'!2)%!-.&#:)%!*'!I$-!)(6-$#Q-.#5$D!



                                               !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
K! L2!-$82#%#%!*'!(#'%6)%!4'(,#&'!*'&'(,#$-(!2)%!(#'%6)%!-!2)%!UI'!'%&8$!'M4I'%&)%!J!2-!6'%&#5$!*'!(#'%6)%!
   4'(,#&'!-*'.I-(!2-%!,'*#*-%!-!*#.V)%!(#'%6)%D!
N! L$!'2!%'$&#*)!O)(,-2!*'!!-I&)(#Q-.#5$!4-(-!,-$'F-(!#$O)(,-.#5$!.2-%#O#.-*-D!T)%!4().'%)%!*'!-.('*#&-.#5$!
   %'!-FI%&-$!-!2-!$)(,-&#:-!-42#.-12'!'$!.-*-!.-%)D!
=!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%!            !                               486#$-!@A!?*'!@ABC!
"-6'(#&!:'(%#5$!<!                                   !                Z'-2#Q-.#5$!*'2!-$82#%#%!J!6'%&#5$!



2. Realización del análisis y de la gestión
L%&'!.-4R&I2)!'M4)$'!*'!O)(,-!.)$.'4&I-2!'$!UI;!.)$%#%&'!'%&)!*'2!-$82#%#%!*'!(#'%6)%!J!-UI'22)!
*'!%I!6'%&#5$W!UI;!%'!1I%.-!'$!.-*-!,),'$&)!J!UI;!.)$.2I%#)$'%!%'!*'(#:-$D!!
i-J!*)%!6(-$*'%!&-('-%!-!('-2#Q-([!
   I. análisis de riesgos,
       UI'!4'(,#&'!*'&'(,#$-(!UI;!&#'$'!2-!E(6-$#Q-.#5$!J!'%&#,-(!2)!UI'!4)*(R-!4-%-(D!
L2','$&)%[!
   @D! -.&#:)%W!UI'!$)!%)$!%#$)!2)%!'2','$&)%!*'2!%#%&',-!*'!#$O)(,-.#5$!?)!'%&('.V-,'$&'!('2-.#)g
       $-*)%!.)$!'%&'C!UI'!-4)(&-$!:-2)(!-!2-!E(6-$#Q-.#5$!
   <D! -,'$-Q-%W!UI'!$)!%)$!%#$)!.)%-%!UI'!2'%!4I'*'$!4-%-(!-!2)%!-.&#:)%!.-I%-$*)!I$!4'(FI#.#)!
       -!2-!E(6-$#Q-.#5$!
   >D! %-2:-6I-(*-%!?)!.)$&(-!,'*#*-%CW!UI'!$)!%)$!%#$)!'2','$&)%!*'!*'O'$%-!*'%42'6-*)%!4-(-!
       UI'!-UI'22-%!-,'$-Q-%!$)!.-I%'$!p&-$&)q!*-c)D!
3)$!'%&)%!'2','$&)%!%'!4I'*'!'%&#,-([!
   @D! '2!#,4-.&)[!2)!UI'!4)*(R-!4-%-(!
   <D! '2!(#'%6)[!2)!UI'!4()1-12','$&'!4-%'!
L2!-$82#%#%!*'!(#'%6)%!4'(,#&'!-$-2#Q-(!'%&)%!'2','$&)%!*'!O)(,-!,'&5*#.-!4-(-!22'6-(!-!.)$.2I%#)g
$'%!.)$!OI$*-,'$&)D!
   II. gestión de riesgos,
       UI'! 4'(,#&'! )(6-$#Q-(! 2-! *'O'$%-! .)$.#'$QI*-! J! 4(I*'$&'W! *'O'$*#'$*)! 4-(-! UI'! $)! 4-%'!
       $-*-!,-2)!J!-2!&#',4)!'%&-$*)!4('4-(-*)%!4-(-!-&-F-(!2-%!','(6'$.#-%W!%)1(':#:#(!-!2)%!#$.#g
       *'$&'%!J!%'6I#(!)4'(-$*)!'$!2-%!,'F)('%!.)$*#.#)$'%h!.),)!$-*-!'%!4'(O'.&)W!%'!*#.'!UI'!'2!
       (#'%6)!%'!('*I.'!-!I$!$#:'2!('%#*I-2!UI'!2-!#('..#5$!-%I,'D!
H$O)(,-2,'$&'W!%'!4I'*'!*'.#(!UI'!2-!6'%&#5$!*'!2-!%'6I(#*-*!*'!I$!%#%&',-!*'!#$O)(,-.#5$!'%!2-!
6'%&#5$!*'!%I%!(#'%6)%!J!UI'!'2!-$82#%#%!4'(,#&'!(-.#)$-2#Q-(!*#.V-!6'%&#5$D!

2.1. Análisis de Riesgos
L2!-$82#%#%!*'!(#'%6)%!'%!I$-!-4()M#,-.#5$!,'&5*#.-!4-(-!*'&'(,#$-(!'2!(#'%6)!%#6I#'$*)!I$)%!4-g
%)%!4-I&-*)%[!
   @D! *'&'(,#$-(!2)%!-.&#:)%!('2':-$&'%!4-(-!2-!E(6-$#Q-.#5$W!%I!#$&'(('2-.#5$!J!%I!:-2)(W!'$!'2!%'$g
       &#*)!*'!UI;!4'(FI#.#)!?.)%&'C!%I4)$*(R-!%I!*'6(-*-.#5$!
   <D! *'&'(,#$-(!-!UI;!-,'$-Q-%!'%&8$!'M4I'%&)%!-UI'22)%!-.&#:)%!
   >D! *'&'(,#$-(!UI;!%-2:-6I-(*-%!V-J!*#%4I'%&-%!J!.I8$!'O#.-.'%!%)$!O('$&'!-2!(#'%6)!
   BD! '%&#,-(!'2!#,4-.&)W!*'O#$#*)!.),)!'2!*-c)!%)1('!'2!-.&#:)!*'(#:-*)!*'!2-!,-&'(#-2#Q-.#5$!*'!2-!
       -,'$-Q-!
   AD! '%&#,-(!'2!(#'%6)W!*'O#$#*)!.),)!'2!#,4-.&)!4)$*'(-*)!.)$!2-!&-%-!*'!).I(('$.#-!?)!'M4'.&-g
       &#:-!*'!,-&'(#-2#Q-.#5$C!*'!2-!-,'$-Q-!
3)$!'2!)1F'&)!*'!)(6-$#Q-(!2-!4('%'$&-.#5$W!%'!&(-&-$!4(#,'()!2)%!4-%)%!@W!<W!B!J!AW!)1:#-$*)!'2!4-g
%)! >W! *'! O)(,-! UI'! 2-%! '%&#,-.#)$'%! *'! #,4-.&)! J! (#'%6)! %'-$! j4)&'$.#-2'%k[! .-%)! *'! UI'! $)!
VI1#'(-!%-2:-6I-(*-!-26I$-!*'%42'6-*-D!9$-!:'Q!)1&'$#*)!'%&'!'%.'$-(#)!&'5(#.)W!%'!#$.)(4)(-$!
2-%!%-2:-6I-(*-%!*'2!4-%)!>W!*'(#:-$*)!'%&#,-.#)$'%!('-2#%&-%!*'!#,4-.&)!J!(#'%6)D!




=!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%!           !                               486#$-!@G!?*'!@ABC!
"-6'(#&!:'(%#5$!<!                                                    !                    Z'-2#Q-.#5$!*'2!-$82#%#%!J!6'%&#5$!
T-!%#6I#'$&'!O#6I(-!('.)6'!'%&'!4(#,'(!('.)((#*)W!.IJ)%!4-%)%!%'!*'&-22-$!'$!2-%!%#6I#'$&'%!%'..#)g
$'% P[!
                                           '%&8$!'M4I'%&)%!-
                                                                                            activos
                                                                                             activos
                                                                                H$&'('%-$!4)(!%I


                                    amenazas
                                     amenazas
                                                                                             valor
                                                                                              valor

                                             .-I%-$!I$-!.#'(&-
                                                                 degradación
                                                                  degradación
                                                                                           impacto
                                                                                            impacto
                                              .)$!I$-!.#'(&-
                                                                 frecuencia
                                                                  frecuencia

                                                                                            riesgo
                                                                                              riesgo
                                                                                                       !

2.1.1. Paso 1: Activos
]'!*'$),#$-$!-.&#:)%!2)%!recursos del sistema de información o relacionados con éste, ne-
cesarios para que la Organización funcione correctamente y alcance los objetivos propues-
tos por su dirección.
L2!-.&#:)!'%'$.#-2!'%!2-!#$O)(,-.#5$!UI'!,-$'F-!'2!%#%&',-h!)!%'-!2)%!*-&)%D!o!-2('*'*)(!*'!'%&)%!
*-&)%!%'!4I'*'$!#*'$&#O#.-(!)&()%!-.&#:)%!('2':-$&'%[!
    Los servicios!UI'!%'!4I'*'$!4('%&-(!6(-.#-%!-!-UI'22)%!*-&)%W!J!2)%!%'(:#.#)%!UI'!%'!$'.'%#&-$!
      4-(-!4)*'(!6'%&#)$-(!*#.V)%!*-&)%D!
    Las aplicaciones informáticas (software) UI'!4'(,#&'$!,-$'F-(!2)%!*-&)%D!
    Los equipos informáticos (hardware) J! UI'! 4'(,#&'$! V)%4'*-(! *-&)%W! -42#.-.#)$'%! J! %'(:#g
      .#)%D!
    Los soportes de información UI'!%)$!*#%4)%#&#:)%!*'!-2,-.'$-,#'$&)!*'!*-&)%D!
    El equipamiento auxiliar UI'!.),42','$&-!'2!,-&'(#-2!#$O)(,8&#.)D!
    Las redes de comunicaciones!UI'!4'(,#&'$!#$&'(.-,1#-(!*-&)%D!
    Las instalaciones UI'!-.)6'$!'UI#4)%!#$O)(,8&#.)%!J!*'!.),I$#.-.#)$'%D!
    Las personas UI'!'M42)&-$!I!)4'(-$!&)*)%!2)%!'2','$&)%!-$&'(#)(,'$&'!.#&-*)%D!

Tipos de activos
7)!&)*)%!2)%!-.&#:)%!%)$!*'!2-!,#%,-!'%4'.#'D!'4'$*#'$*)!*'2!&#4)!*'!-.&#:)W!2-%!-,'$-Q-%!J!2-%!
%-2:-6I-(*-%!%)$!*#O'('$&'% @SD!L2!.-4R&I2)!<!*'2!m3-&82)6)!*'!L2','$&)%m!4('%'$&-!I$-!('2-.#5$!*'!
&#4)%!*'!-.&#:)%D!
]#! '2! %#%&',-! ,-$'F-! *-&)%! *'! .-(8.&'(! 4'(%)$-2W! '%&)%! %I'2'$! %'(! #,4)(&-$&'%! 4)(! %R! ,#%,)%! J!
('UI'(#(! I$-! %'(#'! *'! %-2:-6I-(*-%! O('.I'$&','$&'! ('6I2-*-%! 4)(! 2'JD! L$! '%&)%! -.&#:)%! #$&'('%-!




                                               !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
P! T)%!2'.&)('%!O-,#2#-(#Q-*)%!.)$!"-6'(#&!:@DSW!*'&'.&-(8$!2-!-I%'$.#-!*'!2-!:)Q!j:I2$'(-1#2#*-*kD!L2!.)$.'4g
   &)!*'!:I2$'(-1#2#*-*!?4)&'$.#-2#*-*!)!4)%#1#2#*-*!*'!).I(('$.#-!*'!I$-!-,'$-Q-!%)1('!I$!-.&#:)C!%'!#$g
   .)(4)(-!4)(!,'*#)!*'!2-%!,;&(#.-%!*'!*'6(-*-.#5$!*'2!-.&#:)!J!O('.I'$.#-!*'!).I(('$.#-!*'!2-!-,'$-Q-D!
@S!7)!%'!-&-.-!$#!%'!*'O#'$*'!*'!2-!,#%,-!,-$'(-!I$!%'(:#.#)!&'2',8&#.)!UI'!I$!2).-2!*'!&(-1-F)D!
=!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%!                            !                                    486#$-!@K!?*'!@ABC!
"-6'(#&!:'(%#5$!<!                                              !              Z'-2#Q-.#5$!*'2!-$82#%#%!J!6'%&#5$!
*'&'(,#$-(!UI;!&(-&-,#'$&)!V-J!UI'!#,4)$'(2'% @@D!L2!V'.V)!*'!UI'!I$!*-&)!%'-!*'!.-(8.&'(!4'(%)g
$-2!#,4-.&-!%)1('!&)*)%!2)%!-.&#:)%!#$:)2I.(-*)%!'$!%I!&(-&-,#'$&)!J!.I%&)*#-D!
+26)! %#,#2-(! ).I(('! .)$! 2)%! *-&)%! %),'&#*)%! -! I$-! .2-%#O#.-.#5$! *'! .)$O#*'$.#-2#*-*D! 3I-$*)! %'!
*#.'!UI'!I$!.#'(&)!#$O)(,'!'%&8!.2-%#O#.-*)!.),)!“reservado”, *'!O)(,-!UI'!2-%!.)4#-%!'%&8$!$I,'g
(-*-%W! %52)! 4I'*'$! 22'6-(! -! .#'(&-%! 4'(%)$-%W! $)! *'1'$! %-2#(! *'2! ('.#$&)! J! *'1'$! %'(! *'%&(I#*-%!
.)$.#'$QI*-,'$&'W! '&.D! %'! '%&8$! #,4)$#'$*)! I$-!%'(#'!*'!%-2:-6I-(*-%!4)(UI'!2)!)(*'$-!'2!('g
62-,'$&)W!%'.&)(#-2!)!'%4'.RO#.)!*'!2-!E(6-$#Q-.#5$D!

Dependencias
T)%!-.&#:)%!,8%!22-,-&#:)%!%I'2'$!%'(!2)%!*-&)%!J!2)%!%'(:#.#)%h!4'()!'%&)%!-.&#:)%!*'4'$*'$!*'!
)&()%! -.&#:)%! ,8%! 4()%-#.)%! .),)! 4I'*'$! %'(! 2)%! 'UI#4)%W! 2-%! .),I$#.-.#)$'%! )! 2-%! O('.I'$&'g
,'$&'! )2:#*-*-%! 4'(%)$-%! UI'! &(-1-F-$! .)$! -UI'22)%D! /)(! '22)! -4-('.'! .),)! #,4)(&-$&'! '2! .)$g
.'4&)!*'!j*'4'$*'$.#-%!'$&('!-.&#:)%k!)!2-!,'*#*-!'$!UI'!I$!-.&#:)!superior %'!:'(R-!-O'.&-*)!4)(!
I$!#$.#*'$&'!*'!%'6I(#*-*!'$!I$!-.&#:)!inferior @<.         !




]'!*#.'!UI'!I$!j-.&#:)!%I4'(#)(k!*'4'$*'!*'!)&()!j-.&#:)!#$O'(#)(k!.I-$*)!2-%!$'.'%#*-*'%!*'!%'6Ig
(#*-*!*'2!%I4'(#)(!%'!('O2'F-$!'$!2-%!$'.'%#*-*'%!*'!%'6I(#*-*!*'2!#$O'(#)(D!EW!*#.V)!'$!)&(-%!4-2-g
1(-%W!.I-$*)!2-!,-&'(#-2#Q-.#5$!*'!I$-!-,'$-Q-!'$!'2!-.&#:)!#$O'(#)(!&#'$'!.),)!.)$%'.I'$.#-!I$!
4'(FI#.#)!%)1('!'2!-.&#:)!%I4'(#)(D!H$O)(,-2,'$&'!4I'*'!#$&'(4('&-(%'!UI'!2)%!-.&#:)%!#$O'(#)('%!%)$!
2)%!4#2-('%!'$!2)%!UI'!%'!-4)J-!2-!%'6I(#*-*!*'!2)%!-.&#:)%!%I4'(#)('%D!
+I$UI'!'$!.-*-!.-%)!V-J!UI'!-*-4&-(%'!-!2-!E(6-$#Q-.#5$!)1F'&)!*'2!-$82#%#%W!.)$!O('.I'$.#-!%'!
4I'*'!'%&(I.&I(-(!'2!.)$FI$&)!*'!-.&#:)%!'$!.-4-%W!*)$*'!2-%!.-4-%!%I4'(#)('%!*'4'$*'$!*'!2-%!
#$O'(#)('%[!
     !"    .-4-!@[!el entorno[!-.&#:)%!UI'!%'!4('.#%-$!4-(-!6-(-$&#Q-(!2-%!%#6I#'$&'%!.-4-%!
                        !"    'UI#4-,#'$&)!J!%I,#$#%&()%[!'$'(6R-W!.2#,-&#Q-.#5$W!.),I$#.-.#)$'%!
                        !"    4'(%)$-2[!*'!*#('..#5$W!*'!)4'(-.#5$W!*'!*'%-(()22)W!'&.D!
                        !"    )&()%[!'*#O#.#)%W!,)1#2#-(#)W!'&.D!
     !"    .-4-!<[!el sistema de información!4()4#-,'$&'!*#.V)!
                        !"    'UI#4)%!#$O)(,8&#.)%!(hardware)
                        !"    -42#.-.#)$'%!(software)
                        !"    .),I$#.-.#)$'%!
                        !"    %)4)(&'%!*'!#$O)(,-.#5$[!*#%.)%W!.#$&-%W!'&.D!
     !"    .-4-!>[!la información
                        !"    *-&)%!
                        !"    ,'&-g*-&)%[!'%&(I.&I(-%W!R$*#.'%W!.2-:'%!*'!.#O(-W!'&.D!
     !"    .-4-!B[!las funciones de la OrganizaciónW!UI'!FI%&#O#.-$!2-!'M#%&'$.#-!*'2!%#%&',-!*'!#$g
           O)(,-.#5$!J!2'!*-$!O#$-2#*-*!
                        !"    )1F'&#:)%!J!,#%#5$!
                        !"    1#'$'%!J!%'(:#.#)%!4()*I.#*)%!
     !"    .-4-!A[!otros!-.&#:)%!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
                                               !
@@!L%!.),)!%#!'2!2'6#%2-*)(!VI1#'(-!('-2#Q-*)!'2!-$82#%#%!*'!(#'%6)%!4)(!$)%)&()%!J!VI1#'(-!*'&'(,#$-*)!2-%!
   %-2:-6I-(*-%!4'(&#$'$&'%D!L$!&)*)!.-%)W!2'J'%!J!('6I2-.#)$'%!'M#%&'$!J!-JI*-$!-!UI'!'%&)%!*-&)%W!.#'(g
   &-,'$&'!#,4)(&-$&'%W!'%&;$!4()&'6#*)%D!
@<!9$!'F',42)!4I'*'!%'(!,'F)(!UI'!,#2!4-2-1(-%D!]#!%'!UI',-!'2!2).-2!UI'!V)%4'*-!2)%!'UI#4)%W!2)!UI'!$)!
   OI$.#)$-!'%!'2!%'(:#.#)!4'(.#1#*)!4)(!'2!I%I-(#)!-!r#25,'&()%!*'!*#%&-$.#-D!]#!()1-$!'2!4)(&8&#2!*'!I$!'F'.Ig
   &#:)!.)$!#$O)(,-.#5$!'%&(-&;6#.-!*'!2-!',4('%-W!2)!UI'!%IO('!'%!2-!.)$O#*'$.#-2#*-*!*'!*#.V-!#$O)(,-.#5$D!
   T-%!#$%&-2-.#)$'%!%'!('.)$%&(IJ'$h!4'()!4I'*'!V-1'(%'!4-%-*)!2-!)4)(&I$#*-*!*'!4('%&-(!'2!%'(:#.#)D!L2!
   ()1)!%'!%I1%-$-!.),4(-$*)!)&()!4)(&8&#2h!4'()!'2!%'.('&)!J-!'%&8!4'(*#*)D!
=!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%!                      !                            486#$-!@N!?*'!@ABC!
"-6'(#&!:'(%#5$!<!                                           !            Z'-2#Q-.#5$!*'2!-$82#%#%!J!6'%&#5$!
                        !"    .('*#1#2#*-*!)!1I'$-!#,-6'$!
                        !"    .)$).#,#'$&)!-.I,I2-*)!
                        !"    #$*'4'$*'$.#-!*'!.(#&'(#)!)!-.&I-.#5$!
                        !"    #$&#,#*-*!*'!2-%!4'(%)$-%!
                        !"    #$&'6(#*-*!OR%#.-!*'!2-%!4'(%)$-%!

Valoración
X/)(!UI;!#$&'('%-!I$!-.&#:)Y!/)(!2)!UI'!:-2'D!
7)!%'!'%&8!V-12-$*)!*'!2)!UI'!.I'%&-$!2-%!.)%-%W!%#$)!*'!2)!UI'!:-2'$D!]#!-26)!$)!:-2'!4-(-!$-*-W!
4('%.R$*-%'!*'!'22)D!]#!$)!%'!4I'*'!4('%.#$*#(!#,4I$','$&'!*'!I$!-.&#:)W!'%!UI'!-26)!:-2'h!'%)!
'%!2)!UI'!V-J!UI'!-:'(#6I-(!4I'%!'%)!'%!2)!UI'!V-J!UI'!4()&'6'(D!
L2! :-2)(! 4I'*'! %'(! 4()4#)W! )! 4I'*'! %'(! -.I,I2-*)D! ]'! *#.'! UI'! 2)%! -.&#:)%! #$O'(#)('%! '$! I$! '%g
UI',-!*'!*'4'$*'$.#-%W!-.I,I2-$!'2!:-2)(!*'!2)%!-.&#:)%!UI'!%'!-4)J-$!'$!'22)%D!
L2!:-2)(!$I.2'-(!%I'2'!'%&-(!'$!2-!#$O)(,-.#5$!?)!*-&)%C!UI'!'2!%#%&',-!,-$'F-W!UI'*-$*)!2)%!*'g
,8%! -.&#:)%! %I1)(*#$-*)%! -! 2-%! $'.'%#*-*'%! *'! 'M42)&-.#5$! J! 4()&'..#5$! *'! 2-! #$O)(,-.#5$D! /)(!
)&(-!4-(&'W!2)%!%#%&',-%!*'!#$O)(,-.#5$!'M42)&-$!2)%!*-&)%!4-(-!4()4)(.#)$-(!%'(:#.#)%W!#$&'($)%!-!
2-!E(6-$#Q-.#5$!)!*'%&#$-*)%!-!&'(.'()%W!-4-('.#'$*)!I$-!%'(#'!*'!*-&)%!$'.'%-(#)%!4-(-!4('%&-(!
I$! %'(:#.#)D! ]#$! '$&(-(! '$! *'&-22'%! &;.$#.)%! *'! .5,)! %'! V-.'$! 2-%! .)%-%W! '2! .)$FI$&)! *'! *-&)%! J!
%'(:#.#)%! O#$-2'%! 4'(,#&'! .-(-.&'(#Q-(! OI$.#)$-2,'$&'! I$-! )(6-$#Q-.#5$D! T-%! *'4'$*'$.#-%! '$&('!
-.&#:)%!4'(,#&'$!('2-.#)$-(!2)%!*',8%!-.&#:)%!.)$!*-&)%!J!%'(:#.#)%D!

Dimensiones
'!I$!-.&#:)!4I'*'!#$&'('%-(!.-2#1(-(!*#O'('$&'%!*#,'$%#)$'%[!
         !"   %I!autenticidad: XUI;!4'(FI#.#)!.-I%-(R-!$)!%-1'(!'M-.&-,'$&'!UI#'$!V-.'!)!V-!V'.V)!
              .-*-!.)%-Y!
              L%&-!:-2)(-.#5$!'%!&R4#.-!*'!%'(:#.#)%!?-I&'$&#.#*-*!*'2!I%I-(#)C!J!*'!2)%!*-&)%!?-I&'$&#.#g
              *-*!*'!UI#'$!-..'*'!-!2)%!*-&)%!4-(-!'%.(#1#(!)W!%#,42','$&'W!.)$%I2&-(C!
         !"   %I!confidencialidad[!XUI;!*-c)!.-I%-(R-!UI'!2)!.)$).#'(-!UI#'$!$)!*'1'Y!
              L%&-!:-2)(-.#5$!'%!&R4#.-!*'!*-&)%D!
         !"   %I!integridad[!XUI;!4'(FI#.#)!.-I%-(R-!UI'!'%&I:#'(-!*-c-*)!)!.)((I4&)Y!
              L%&-!:-2)(-.#5$!'%!&R4#.-!*'!2)%!*-&)%W!UI'!4I'*'$!'%&-(!,-$#4I2-*)%W!%'(!&)&-2!)!4-(.#-2g
              ,'$&'!O-2%)%!)W!#$.2I%)W!O-2&-(!*-&)%D!
         !"   %I!disponibilidad[!XUI;!4'(FI#.#)!.-I%-(R-!$)!&'$'(2)!)!$)!4)*'(!I&#2#Q-(2)Y!
              L%&-!:-2)(-.#5$!'%!&R4#.-!*'!2)%!%'(:#.#)% @>D!
L$!%#%&',-%!*'*#.-*)%!-!2-!-*,#$#%&(-.#5$!'2'.&(5$#.-!)!-2!.),'(.#)!'2'.&(5$#.)W!'2!.)$).#,#'$&)!
*'!2)%!-.&)('%!'%!OI$*-,'$&-2!4-(-!4)*'(!4('%&-(!'2!%'(:#.#)!.)(('.&-,'$&'!J!4)*'(!4'(%'6I#(!2)%!
O-22)%!?-..#*'$&-2'%!)!*'2#1'(-*)%C!UI'!4I*#'(-$!*-(%'D!L$!'%&)%!-.&#:)%W!-*',8%!*'!2-!-I&'$&#.#g
*-*W!#$&'('%-!.-2#1(-(!2-[!
         !"   2-!trazabilidad!*'2!I%)!*'2!%'(:#.#)[!XUI;!*-c)!.-I%-(R-!$)!%-1'(!-!UI#;$!%'!2'!4('%&-!&-2!
              %'(:#.#)Y!E!%'-W!XUI#;$!V-.'!UI;!J!.I8$*)Y!
         !"   2-!trazabilidad!*'2!-..'%)!-!2)%!*-&)%[!XUI;!*-c)!.-I%-(R-!$)!%-1'(!UI#;$!-..'*'!-!UI;!
              *-&)%!J!UI;!V-.'!.)$!'22)%Y!


!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
                                               !
@>!i-J!%'(:#.#)%!O#$-2'%!UI'!,-&'(#-2#Q-$!2-!,#%#5$!02&#,-!*'!2-!E(6-$#Q-.#5$D!i-J!%'(:#.#)%!#$&'($)%!*'!2)%!
   UI'!2-!E(6-$#Q-.#5$!%'!%#(:'!4-(-!'%&(I.&I(-(!%I!4()4#-!*#%&(#1I.#5$!*'!('%4)$%-1#2#*-*'%D!/)(!02&#,)W!V-J!
   %'(:#.#)%!UI'!%'!-*UI#'('$!*'!)&(-%!)(6-$#Q-.#)$'%[!%I,#$#%&()%!'M&'($)%D!
=!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%!                   !                            486#$-!@P!?*'!@ABC!
"-6'(#&!:'(%#5$!<!                                  !                 Z'-2#Q-.#5$!*'2!-$82#%#%!J!6'%&#5$!
]'!('.)$).'$!V-1#&I-2,'$&'!2-%!*#,'$%#)$'%!18%#.-%[!-I&'$&#.#*-*W!.)$O#*'$.#-2#*-*W!#$&'6(#*-*!J!
*#%4)$#1#2#*-*D!L$!'%&-!,'&)*)2)6R-!%'!V-!('O#$-*)!2-!-I&'$&#.#*-*!4-(-!*#%&#$6I#(!'$&('!'2!I%)!*'!
I$!%'(:#.#)!J!'2!-..'%)!-!I$)%!*-&)%D!+*',8%!%'!V-!#$&()*I.#*)!'2!.)$.'4&)!*'!&(-Q-1#2#*-*!?*'2!
#$62;%W!accountabilityC!&),-*)!*'!2-%!6IR-%!H]EdHL3!@>>>AW!#6I-2,'$&'!%'6,'$&-*-!'$&(-!2-!&(-Q-g
1#2#*-*!*'2!%'(:#.#)!J!2-!*'!2)%!*-&)%D!T)%!-%4'.&)%!*'!-I&'$&#.#*-*!J!&(-Q-1#2#*-*!*'!2)%!*-&)%!%)$!
.(R&#.)%! 4-(-! %-&#%O-.'(! ,'*#*-%! ('62-,'$&-(#-%! %)1('! O#.V'()%! UI'! .)$&'$6-$! *-&)%! *'! .-(8.&'(!
4'(%)$-2D!
L2!.-4R&I2)!>!*'2!m3-&82)6)!*'!L2','$&)%m!4('%'$&-!I$-!('2-.#5$!*'!*#,'$%#)$'%!*'!%'6I(#*-*D!
L$!I$!8(1)2!*'!*'4'$*'$.#-%W!*)$*'!2)%!-.&#:)%!%I4'(#)('%!*'4'$*'$!*'!2)%!#$O'(#)('%W!'%!#,4('%g
.#$*#12'!:-2)(-(!2)%!-.&#:)%!%I4'(#)('%W!2)%!UI'!%)$!#,4)(&-$&'%!4)(!%R!,#%,)%D!+I&),8&#.-,'$&'!
'%&'!:-2)(!%'!-.I,I2-!'$!2)%!#$O'(#)('%W!2)!UI'!$)!'%!51#.'!4-(-!UI'!&-,1#;$!4I'*-$!,'('.'(W!-*#g
.#)$-2,'$&'W!%I!:-2)(-.#5$!4()4#-D!

¿Cuánto vale la “salud” de los activos?
9$-!:'Q!*'&'(,#$-*-%!UI;!*#,'$%#)$'%!?*'!%'6I(#*-*C!#$&'('%-$!*'!I$!-.&#:)!V-J!UI'!4().'*'(!-!
:-2)(-(2)D! T-! :-2)(-.#5$! '%! 2-! *'&'(,#$-.#5$! *'2!.)%&'!UI'!%I4)$*(R-!%-2#(!*'!I$-!#$.#*'$.#-!UI'!
*'%&()Q-(-!'2!-.&#:)D!i-J!,I.V)%!O-.&)('%!-!.)$%#*'(-([!
   !"   .)%&'!*'!('4)%#.#5$[!-*UI#%#.#5$!'!#$%&-2-.#5$!
   !"   .)%&'!*'!,-$)!*'!)1(-!?'%4'.#-2#Q-*-C!#$:'(&#*-!'$!('.I4'(-(!?'2!:-2)(C!*'2!-.&#:)!
   !"   2I.()!.'%-$&'[!4;(*#*-!*'!#$6('%)%!
   !"   .-4-.#*-*!*'!)4'(-([!.)$O#-$Q-!*'!2)%!I%I-(#)%!J!4():''*)('%!UI'!%'!&(-*I.'!'$!I$-!4;(*#g
        *-!*'!-.&#:#*-*!)!'$!4')('%!.)$*#.#)$'%!'.)$5,#.-%!
   !"   %-$.#)$'%!4)(!#$.I,42#,#'$&)!*'!2-!2'J!I!)12#6-.#)$'%!.)$&(-.&I-2'%!
   !"   *-c)!-!)&()%!-.&#:)%W!4()4#)%!)!-F'$)%!
   !"   *-c)!-!4'(%)$-%!
   !"   *-c)%!,'*#)-,1#'$&-2'%!
T-!:-2)(-.#5$!4I'*'!%'(!.I-$&#&-&#:-!?.)$!I$-!.-$&#*-*!$I,;(#.-C!)!.I-2#&-&#:-!?'$!-26I$-!'%.-2-!
*'!$#:'2'%CD!T)%!.(#&'(#)%!,8%!#,4)(&-$&'%!-!('%4'&-(!%)$[!
   !"   2-! homogeneidad[! '%! #,4)(&-$&'! 4)*'(! .),4-(-(! :-2)('%! -I$UI'! %'-$! *'! *#O'('$&'%! *#g
        ,'$%#)$'%!-!O#$!*'!4)*'(!.),1#$-(!:-2)('%!4()4#)%!J!:-2)('%!-.I,I2-*)%W!-%R!.),)!4)*'(!
        *'&'(,#$-(!%#!'%!,8%!6(-:'!'2!*-c)!'$!I$-!*#,'$%#5$!)!'$!)&(-!
   !"   2-!relatividad[!'%!#,4)(&-$&'!4)*'(!('2-&#:#Q-(!'2!:-2)(!*'!I$!-.&#:)!'$!.),4-(-.#5$!.)$!)&()%!
        -.&#:)%!
`)*)%!'%&)%!.(#&'(#)%!%'!%-&#%O-.'$!.)$!:-2)(-.#)$'%!'.)$5,#.-%!?.)%&'!*#$'(-(#)!('UI'(#*)!4-(-!
j.I(-(k!'2!-.&#:)C!J!'%!O('.I'$&'!2-!&'$&-.#5$!*'!4)$'(2'!4('.#)!-!&)*)D!]#!%'!.)$%#6I'W!'M.'2'$&'D!
H$.2I%)!'%!O8.#2!4)$'(2'!4('.#)!-!2)%!-%4'.&)%!,8%!&-$6#12'%!?'UI#4-,#'$&)W!V)(-%!*'!&(-1-F)W!'&.DCh!
4'()!-2!'$&(-(!'$!:-2)(-.#)$'%!,8%!-1%&(-.&-%!?#$&-$6#12'%!.),)!2-!.('*#1#2#*-*!*'!2-!E(6-$#Q-.#5$C!
2-!:-2)(-.#5$!'.)$5,#.-!'M-.&-!4I'*'!%'(!'%.I((#*#Q-!J!,)&#:)!*'!-6(#-%!*#%4I&-%!'$&('!'M4'(&)%D!
L2!.-4R&I2)!B!*'2!m3-&82)6)!*'!L2','$&)%m!4('%'$&-!I$-%!4-I&-%!4-(-!2-!:-2)(-.#5$!%#%&',8&#.-!*'!
-.&#:)%D!

Valoración cualitativa
T-%!'%.-2-%!.I-2#&-&#:-%!4'(,#&'$!-:-$Q-(!.)$!(-4#*'QW!4)%#.#)$-$*)!'2!:-2)(!*'!.-*-!-.&#:)!'$!I$!
)(*'$! ('2-&#:)! ('%4'.&)! *'! 2)%! *',8%D! L%! O('.I'$&'! 42-$&'-(! '%&-%! '%.-2-%! .),)! j5(*'$'%! *'!
,-6$#&I*k!JW!'$!.)$%'.I'$.#-W!*'(#:-(!'%&#,-.#)$'%!*'2!)(*'$!*'!,-6$#&I*!*'2!(#'%6)D!
T-!2#,#&-.#5$!*'!2-%!:-2)(-.#)$'%!.I-2#&-&#:-%!'%!UI'!$)!4'(,#&'$!.),4-(-(!:-2)('%!,8%!-228!*'!%I!
)(*'$!('2-&#:)D!7)!%'!4I'*'$!%I,-(!:-2)('%D!


=!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%!          !                                486#$-!<S!?*'!@ABC!
"-6'(#&!:'(%#5$!<!                                          !                  Z'-2#Q-.#5$!*'2!-$82#%#%!J!6'%&#5$!
L2!.-4R&I2)!ND@!*'!2-!m^IR-!*'!`;.$#.-%m!4('%'$&-!I$!,)*'2)!*'!-$82#%#%!1-%-*)!'$!:-2)(-.#)$'%!
.I-2#&-&#:-%D!

Valoración cuantitativa
T-%!:-2)(-.#)$'%!$I,;(#.-%!-1%)2I&-%!.I'%&-$!,I.V)!'%OI'(Q)h!4'()!$)!-*)2'.'$!*'!2)%!4()12'g
,-%!*'!2-%!:-2)(-.#)$'%!.I-2#&-&#:-%D!]I,-(!:-2)('%!$I,;(#.)%!'%!-1%)2I&-,'$&'!j$-&I(-2k!J!2-!#$g
&'(4('&-.#5$!*'!2-%!%I,-%!$)!'%!$I$.-!,)&#:)!*'!.)$&():'(%#-D!
]#!2-!:-2)(-.#5$!'%!*#$'(-(#-W!-*',8%!%'!4I'*'$!V-.'(!'%&I*#)%!'.)$5,#.)%!.),4-(-$*)!2)!UI'!
%'!-((#'%6-!.)$!2)!UI'!.I'%&-!2-!%)2I.#5$!('%4)$*#'$*)!-!2-%!4('6I$&-%[!
   !"   X_-2'!2-!4'$-!#$:'(&#(!&-$&)!*#$'()!'$!'%&-!%-2:-6I-(*-Y!
   !"   XsI;!.)$FI$&)!*'!%-2:-6I-(*-%!)4&#,#Q-$!2-!#$:'(%#5$Y!
   !"   XL$!UI;!42-Q)!*'!&#',4)!%'!('.I4'(-!2-!#$:'(%#5$Y!
   !"   X3I8$&)!'%!(-Q)$-12'!UI'!.I'%&'!2-!4(#,-!*'!I$!%'6I()Y!
L2!.-4R&I2)!ND<!*'!2-!m^IR-!*'!`;.$#.-%m!4('%'$&-!I$!,)*'2)!*'!-$82#%#%!1-%-*)!'$!:-2)(-.#)$'%!
.I-$&#&-&#:-%D!

El valor de la interrupción del servicio
3-%#!&)*-%!2-%!*#,'$%#)$'%!,'$.#)$-*-%!-$&'(#)(,'$&'!4'(,#&'$!I$-!:-2)(-.#5$!%#,42'W!.I-2#&-&#g
:-!)!.I-$&#&-&#:-D!/'()!V-J!I$-!'M.'4.#5$W!2-!*#%4)$#1#2#*-*D!
7)!'%!2)!,#%,)!#$&'((I,4#(!I$!%'(:#.#)!I$-!V)(-!)!I$!*R-!)!I$!,'%D!/I'*'!UI'!I$-!V)(-!*'!*'&'$g
.#5$!%'-!#(('2':-$&'W!,#'$&(-%!UI'!I$!*R-!%#$!%'(:#.#)!.-I%-!I$!*-c)!,)*'(-*)h!4'()!I$!,'%!*'&'g
$#*)!%I4)$6-!2-!&'(,#$-.#5$!*'!2-!-.&#:#*-*D!o!2)!,-2)!'%!UI'!$)!'M#%&'!4()4)(.#)$-2#*-*!'$&('!'2!
&#',4)!*'!#$&'((I4.#5$!J!2-%!.)$%'.I'$.#-%D!!
L$!.)$%'.I'$.#-W!4-(-!:-2)(-(!2-!p#$&'((I4.#5$!*'!2-q!*#%4)$#1#2#*-*!*'!I$!-.&#:)!V-J!UI'!I%-(!I$-!
'%&(I.&I(-!,8%!.),42'F-!UI'!%'!4I'*'!('%I,#(!'$!-260$!6(8O#.)!.),)!'2!%#6I#'$&'[!
                                  coste de [la interrupción de la] disponibilidad
                  >




                  <




                  @




                  S
                      @A,   >S,   @V   <V   GV   @*    <*       @%   <%   @,   <,    G,
                                                                                           !
                                                                                          @-    &)&-2


*)$*'! -4-('.'! I$-! %'(#'! *'! '%.-2)$'%! *'! #$&'((I4.#5$! UI'! &'(,#$-$! .)$! 2-! *'%&(I..#5$! &)&-2! )!
4'(,-$'$&'! *'2! -.&#:)D! L$! '2! 'F',42)! -$&'(#)(W! 4-(-*-%! *'! V-%&-! G! V)(-%! %'! 4I'*'$! -%I,#(! %#$!
.)$%'.I'$.#-%D!/'()!-!2-%!G!V)(-%!%'!*#%4-(-$!2-%!-2-(,-%!UI'!-I,'$&-$!%#!2-!4-(-*-!%I4'(-!2)%!
<!*R-%D!o!%#!2-!4-(-*-!%I4'(-!'2!,'%W!%'!4I'*'!*'.#(!UI'!2-!E(6-$#Q-.#5$!V-!4'(*#*)!%I!.-4-.#*-*!
*'!)4'(-([!V-!,I'(&)D!'%*'!'2!4I$&)!*'!:#%&-!*'!2)%!(','*#)%W!2-!6(8O#.-!*#.'!*#('.&-,'$&'!UI'!$)!
V-J!UI'!6-%&-(%'!$#!I$!'I()!4)(!':#&-(!4-(-*-%!*'!,'$)%!*'!G!V)(-%D!_-2'!2-!4'$-!I$!.#'(&)!6-%&)!
4)(!#,4'*#(!UI'!I$-!4-(-*-!%I4'('!2-%!G!V)(-%!)!2)%!<!*R-%D!o!.I-$*)!%'!:-2)('!2)!UI'!.I'%&-!#,g
4'*#(!UI'!2-!4-(-*-!%I4'(-!'2!,'%W!V-J!UI'!4)$'(!'$!2-!1-2-$Q-!&)*)!'2!:-2)(!*'!2-!E(6-$#Q-.#5$!
O('$&'!-2!.)%&'!*'!2-%!%-2:-6I-(*-%D!/I*#'(-!%'(!UI'!$)!:-2#'(-!2-!4'$-D!




=!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%!                  !                                  486#$-!<@!?*'!@ABC!
"-6'(#&!:'(%#5$!<!                                                !               Z'-2#Q-.#5$!*'2!-$82#%#%!J!6'%&#5$!

2.1.2. Paso 2: Amenazas
L2! %#6I#'$&'! 4-%)! .)$%#%&'! '$! *'&'(,#$-(! 2-%! -,'$-Q-%! UI'! 4I'*'$! -O'.&-(! -! .-*-! -.&#:)D! T-%!
-,'$-Q-%!%)$!j.)%-%!UI'!).I(('$kD!oW!*'!&)*)!2)!UI'!4I'*'!).I((#(W!#$&'('%-!2)!UI'!4I'*'!4-%-(2'!
-!$I'%&()%!-.&#:)%!J!.-I%-(!I$!*-c)D!!
i-J! -..#*'$&'%! $-&I(-2'%! ?&'((',)&)%W! #$I$*-.#)$'%W! DDDC! J!*'%-%&('%!#$*I%&(#-2'%!?.)$&-,#$-.#5$W!
O-22)%!'2;.&(#.)%W!DDDC!-$&'!2)%!.I-2'%!'2!%#%&',-!*'!#$O)(,-.#5$!'%!:R.&#,-!4-%#:-h!4'()!$)!4)(!%'(!
4-%#:)%!V-J!UI'!4'(,-$'.'(!#$*'O'$%)%D!i-J!-,'$-Q-%!.-I%-*-%!4)(!2-%!4'(%)$-%W!1#'$!'(()('%W!
1#'$!-&-UI'%!#$&'$.#)$-*)%D!!
L2!.-4R&I2)!A!*'2!m3-&82)6)!*'!L2','$&)%m!4('%'$&-!I$-!('2-.#5$!*'!-,'$-Q-%!&R4#.-%D!
7)!&)*-%!2-%!-,'$-Q-%!-O'.&-$!-!&)*)%!2)%!-.&#:)% @BW!%#$)!UI'!V-J!I$-!.#'(&-!('2-.#5$!'$&('!'2!&#4)!
*'!-.&#:)!J!2)!UI'!2'!4)*(R-!).I((#(D!

Valoración de las amenazas
3I-$*)!I$!-.&#:)!'%!:R.&#,-!*'!I$-!-,'$-Q-W!$)!%'!:'!-O'.&-*)!'$!&)*-%!%I%!*#,'$%#)$'%W!$#!'$!
2-!,#%,-!.I-$&R-D!
9$-!:'Q!*'&'(,#$-*)!UI'!I$-!-,'$-Q-!4I'*'!4'(FI*#.-(!-!I$!-.&#:)W!V-J!UI'!'%&#,-(!.I8$!:I2$'g
(-12' @A!'%!'2!-.&#:)W!'$!*)%!%'$&#*)%[!
    degradación:!.I8$!4'(FI*#.-*)!('%I2&-(R-!'2!-.&#:)!
    frecuencia: .-*-!.I8$&)!%'!,-&'(#-2#Q-!2-!-,'$-Q-!
T-!*'6(-*-.#5$!,#*'!'2!*-c)!.-I%-*)!4)(!I$!#$.#*'$&'!'$!'2!%I4I'%&)!*'!UI'!).I((#'(-D!
T-!*'6(-*-.#5$!%'!%I'2'!.-(-.&'(#Q-(!.),)!I$-!O(-..#5$!*'2!:-2)(!*'2!-.&#:)!J!-%R!-4-('.'$!'M4('g
%#)$'%! .),)! UI'! I$! -.&#:)! %'! V-! :#%&)! j&)&-2,'$&'! *'6(-*-*)kW! )! j*'6(-*-*)! '$! I$-! 4'UI'c-!
O(-..#5$kD! 3I-$*)! 2-%! -,'$-Q-%! $)! %)$! #$&'$.#)$-2'%W! 4()1-12','$&'! 1-%&'! .)$).'(! 2-! O(-..#5$!
OR%#.-,'$&'!4'(FI*#.-*-!*'!I$!-.&#:)!4-(-!.-2.I2-(!2-!4;(*#*-!4()4)(.#)$-2!*'!:-2)(!UI'!%'!4#'(*'D!
/'()!.I-$*)!2-!-,'$-Q-!'%!#$&'$.#)$-2W!$)!%'!4I'*'!4'$%-(!'$!4()4)(.#)$-2#*-*!-26I$-!4I'%!'2!
-&-.-$&'!4I'*'!.-I%-(!,I.VR%#,)!*-c)!*'!O)(,-!%'2'.&#:-D!
T-!O('.I'$.#- @G!4)$'!'$!4'(%4'.&#:-!-UI'22-!*'6(-*-.#5$W!4I'%!I$-!-,'$-Q-!4I'*'!%'(!*'!&'((#g
12'%! .)$%'.I'$.#-%! 4'()! *'! ,IJ! #,4()1-12'! ,-&'(#-2#Q-.#5$h! ,#'$&(-%! UI'! )&(-! -,'$-Q-! 4I'*'!
%'(!*'!,IJ!1-F-%!.)$%'.I'$.#-%W!4'()!&-$!O('.I'$&'!.),)!4-(-!-.-1-(!-.I,I2-$*)!I$!*-c)!.)$g
%#*'(-12'D!
T-!O('.I'$.#-!%'!,)*'2-!.),)!I$-!&-%-!-$I-2!*'!).I(('$.#-W!%#'$*)!:-2)('%!&R4#.)%!
                                              @SS! ,IJ!O('.I'$&'!     -!*#-(#)!
                                               @S! O('.I'$&'!         ,'$%I-2,'$&'!
                                                   @!   $)(,-2!       I$-!:'Q!-2!-c)!
                                             @d@S! 4).)!O('.I'$&'!    .-*-!:-(#)%!-c)%!
!




!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
                                               !
@B!T-%!#$%&-2-.#)$'%!4I'*'$!#$.'$*#-(%'h!4'()!2-%!-42#.-.#)$'%W!$)D!T-%!4'(%)$-%!4I'*'$!%'(!)1F'&)!*'!I$!
   -&-UI'!1-.&'(#)256#.)h!4'()!2)%!%'(:#.#)%W!$)D!]#$!',1-(6)W!2)%!:#(I%!#$O)(,8&#.)%!-O'.&-$!-!2-%!-42#.-.#)g
   $'%W!$)!-!2-%!4'(%)$-%D!
@A!T)%!2'.&)('%!O-,#2#-(#Q-*)%!.)$!"-6'(#&!:@DSW!*'&'.&-(8$!2-!-I%'$.#-!*'!2-!:)Q!j:I2$'(-1#2#*-*kD!L2!.)$.'4g
   &)!*'!:I2$'(-1#2#*-*!?4)&'$.#-2#*-*!)!4)%#1#2#*-*!*'!).I(('$.#-!*'!I$-!-,'$-Q-!%)1('!I$!-.&#:)C!%'!#$g
   .)(4)(-!4)(!,'*#)!*'!2-%!,;&(#.-%!*'!*'6(-*-.#5$!*'2!-.&#:)!J!O('.I'$.#-!*'!).I(('$.#-!*'!2-!-,'$-Q-D!
@G!]'!,#*'!.),)!'2!$0,'()!,'*#)!*'!).I(('$.#-%!*'!2-!-,'$-Q-!'$!I$!#$&'(:-2)!*'&'(,#$-*)!*'!&#',4)D!
   `R4#.-,'$&'!'%&#,-!%)1('!4'(#)*)%!-$I-2'%D!/)(!'F',42)W!%#!'$!I$!.#'(&)!%#%&',-!%'!4()*I.'!I$-!-:'(R-!
   *'2!-#('!-.)$*#.#)$-*)!I$!4(),'*#)!*'!.#$.)!:'.'%!'$!I$!-c)W!'%-!'%!2-!O('.I'$.#-[!AD!
=!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%!                        !                             486#$-!<<!?*'!@ABC!
"-6'(#&!:'(%#5$!<!                                     !                 Z'-2#Q-.#5$!*'2!-$82#%#%!J!6'%&#5$!

2.1.3. Paso 4: Determinación del impacto
]'!*'$),#$-!#,4-.&)!-!2-!,'*#*-!*'2!*-c)!%)1('!'2!-.&#:)!*'(#:-*)!*'!2-!,-&'(#-2#Q-.#5$!*'!I$-!
-,'$-Q-D!3)$).#'$*)!'2!:-2)(!*'!2)%!-.&#:)%!?'$!:-(#-%!*#,'$%#)$'%C!J!2-!*'6(-*-.#5$!UI'!.-I%-$!
2-%!-,'$-Q-%W!'%!*#('.&)!*'(#:-(!'2!#,4-.&)!UI'!'%&-%!&'$*(R-$!%)1('!'2!%#%&',-D!T-!0$#.-!.)$%#*'g
(-.#5$!UI'!UI'*-!V-.'(!'%!('2-&#:-!-!2-%!*'4'$*'$.#-%!'$&('!-.&#:)%D!L%!O('.I'$&'!UI'!'2!:-2)(!*'2!
%#%&',-! *'! #$O)(,-.#5$! %'! .'$&('! '$! 2)%! %'(:#.#)%! UI'! 4('%&-! J! 2)%! *-&)%! UI'! ,-$'F-W! -2! &#',4)!
UI'!2-%!-,'$-Q-%!%I'2'$!,-&'(#-2#Q-(%'!'$!2)%!,'*#)%D!

Impacto acumulado
L%!'2!.-2.I2-*)!%)1('!I$!-.&#:)!&'$#'$*)!'$!.I'$&-!
   !"   %I!:-2)(!-.I,I2-*)!?'2!4()4#)!,-%!'2!-.I,I2-*)!*'!2)%!-.&#:)%!UI'!*'4'$*'$!*'!;2C!
   !"   2-%!-,'$-Q-%!-!UI'!'%&8!'M4I'%&)!
L2!#,4-.&)!-.I,I2-*)!%'!.-2.I2-!4-(-!.-*-!-.&#:)W!4)(!.-*-!-,'$-Q-!J!'$!.-*-!*#,'$%#5$!*'!:-g
2)(-.#5$W!%#'$*)!I$-!OI$.#5$!*'2!:-2)(!-.I,I2-*)!J!*'!2-!*'6(-*-.#5$!.-I%-*-D!
L2!#,4-.&)!'%!&-$&)!,-J)(!.I-$&)!,-J)(!'%!'2!:-2)(!4()4#)!)!-.I,I2-*)!%)1('!I$!-.&#:)D!
L2!#,4-.&)!'%!&-$&)!,-J)(!.I-$&)!,-J)(!%'-!2-!*'6(-*-.#5$!*'2!-.&#:)!-&-.-*)D!
L2!#,4-.&)!-.I,I2-*)W!-2!.-2.I2-(%'!%)1('!2)%!-.&#:)%!UI'!%)4)(&-$!'2!4'%)!*'2!%#%&',-!*'!#$O)(g
,-.#5$W!4'(,#&'!*'&'(,#$-(!2-%!%-2:-6I-(*-%!*'!UI'!V-J!UI'!*)&-(!-!2)%!,'*#)%!*'!&(-1-F)[!4()g
&'..#5$!*'!2)%!'UI#4)%W!.)4#-%!*'!('%4-2*)W!'&.D!

Impacto repercutido
L%!'2!.-2.I2-*)!%)1('!I$!-.&#:)!&'$#'$*)!'$!.I'$&-!
   !"   %I!:-2)(!4()4#)!
   !"   2-%!-,'$-Q-%!-!UI'!'%&8$!'M4I'%&)%!2)%!-.&#:)%!*'!2)%!UI'!*'4'$*'!
L2! #,4-.&)! ('4'(.I&#*)! %'! .-2.I2-! 4-(-! .-*-! -.&#:)W! 4)(! .-*-! -,'$-Q-! J! '$! .-*-! *#,'$%#5$! *'!
:-2)(-.#5$W!%#'$*)!I$-!OI$.#5$!*'2!:-2)(!4()4#)!J!*'!2-!*'6(-*-.#5$!.-I%-*-D!
L2!#,4-.&)!'%!&-$&)!,-J)(!.I-$&)!,-J)(!'%!'2!:-2)(!4()4#)!*'!I$!-.&#:)D!
L2!#,4-.&)!'%!&-$&)!,-J)(!.I-$&)!,-J)(!%'-!2-!*'6(-*-.#5$!*'2!-.&#:)!-&-.-*)D!
L2!#,4-.&)!'%!&-$&)!,-J)(!.I-$&)!,-J)(!%'-!2-!*'4'$*'$.#-!*'2!-.&#:)!-&-.-*)D!
L2!#,4-.&)!('4'(.I&#*)W!-2!.-2.I2-(%'!%)1('!2)%!-.&#:)%!UI'!&#'$'$!:-2)(!4()4#)W!4'(,#&'!*'&'(,#$-(!
2-%!.)$%'.I'$.#-%!*'!2-%!#$.#*'$.#-%!&;.$#.-%!%)1('!2-!,#%#5$!*'2!%#%&',-!*'!#$O)(,-.#5$D!L%!4I'%!
I$-! 4('%'$&-.#5$! 6'('$.#-2! UI'! -JI*-! -! &),-(! I$-! *'! 2-%! *'.#%#)$'%! .(R&#.-%! *'! I$! -$82#%#%! *'!
(#'%6)%[!-.'4&-(!I$!.#'(&)!$#:'2!*'!(#'%6)D!!

Agregación de valores de impacto
T)%!48((-O)%!-$&'(#)('%!*'&'(,#$-$!'2!#,4-.&)!UI'!%)1('!I$!-.&#:)!&'$*(R-!I$-!-,'$-Q-!'$!!I$-!
.#'(&-!*#,'$%#5$D!L%&)%!#,4-.&)%!%#$6I2-('%!4I'*'$!-6('6-(%'!1-F)!.#'(&-%!.)$*#.#)$'%[!
   !"   4I'*'!-6('6-(%'!'2!#,4-.&)!('4'(.I&#*)!%)1('!*#O'('$&'%!-.&#:)%W!
   !"   4I'*'!-6('6-(%'!'2!#,4-.&)!-.I,I2-*)!%)1('!-.&#:)%!UI'!$)!%'-$!*'4'$*#'$&'%!'$&('!%RW!$#!
        *'4'$*-$!*'!$#$60$!-.&#:)!%I4'(#)(!.),0$W!
   !"   $)!*'1'!-6('6-(%'!'2!#,4-.&)!-.I,I2-*)!%)1('!-.&#:)%!UI'!$)!%'-$!#$*'4'$*#'$&'%W!4I'%!
        '22)!%I4)$*(R-!%)1('!4)$*'(-(!'2!#,4-.&)!-2!#$.2I#(!:-(#-%!:'.'%!'2!:-2)(!-.I,I2-*)!*'!-.&#g
        :)%!%I4'(#)('%W!
   !"   4I'*'! -6('6-(%'! '2! #,4-.&)! *'! *#O'('$&'%! -,'$-Q-%! %)1('! I$! ,#%,)! -.&#:)W! -I$UI'! .)$g
        :#'$'!.)$%#*'(-(!'$!UI;!,'*#*-!2-%!*#O'('$&'%!-,'$-Q-%!%)$!#$*'4'$*#'$&'%!J!4I'*'$!%'(!
        .)$.I(('$&'%W!

=!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%!             !                                 486#$-!<>!?*'!@ABC!
"-6'(#&!:'(%#5$!<!                                      !                 Z'-2#Q-.#5$!*'2!-$82#%#%!J!6'%&#5$!
   !"   4I'*'!-6('6-(%'!'2!#,4-.&)!*'!I$-!-,'$-Q-!'$!*#O'('$&'%!*#,'$%#)$'%D!

2.1.4. Paso 5: Determinación del riesgo
]'!*'$),#$-!(#'%6)!-!2-!,'*#*-!*'2!*-c)!4()1-12'!%)1('!I$!%#%&',-D!3)$).#'$*)!'2!#,4-.&)!*'!
2-%! -,'$-Q-%! %)1('! 2)%! -.&#:)%W! '%! *#('.&)! *'(#:-(! '2! (#'%6)! %#$! ,8%! UI'! &'$'(! '$! .I'$&-! 2-! O('g
.I'$.#-!*'!).I(('$.#-D!
L2!(#'%6)!.('.'!.)$!'2!#,4-.&)!J!.)$!2-!O('.I'$.#-D!

Riesgo acumulado
L%!'2!.-2.I2-*)!%)1('!I$!-.&#:)!&'$#'$*)!'$!.I'$&-!
   !"   '2!#,4-.&)!-.I,I2-*)!%)1('!I$!-.&#:)!*'1#*)!-!I$-!-,'$-Q-!J!
   !"   2-!O('.I'$.#-!*'!2-!-,'$-Q-!
L2!(#'%6)!-.I,I2-*)!%'!.-2.I2-!4-(-!.-*-!-.&#:)W!4)(!.-*-!-,'$-Q-!J!'$!.-*-!*#,'$%#5$!*'!:-2)g
(-.#5$W! %#'$*)! I$-! OI$.#5$! *'2! :-2)(! -.I,I2-*)W! 2-! *'6(-*-.#5$! .-I%-*-! J! 2-! O('.I'$.#-! *'! 2-!
-,'$-Q-D!
L2!(#'%6)!-.I,I2-*)W!-2!.-2.I2-(%'!%)1('!2)%!-.&#:)%!UI'!%)4)(&-$!'2!4'%)!*'2!%#%&',-!*'!#$O)(,-g
.#5$W!4'(,#&'!*'&'(,#$-(!2-%!%-2:-6I-(*-%!*'!UI'!V-J!UI'!*)&-(!-!2)%!,'*#)%!*'!&(-1-F)[!4()&'.g
.#5$!*'!2)%!'UI#4)%W!.)4#-%!*'!('%4-2*)W!'&.D!

Riesgo repercutido
L%!'2!.-2.I2-*)!%)1('!I$!-.&#:)!&'$#'$*)!'$!.I'$&-!
   !"   '2!#,4-.&)!('4'(.I&#*)!%)1('!I$!-.&#:)!*'1#*)!-!I$-!-,'$-Q-!J!
   !"   2-!O('.I'$.#-!*'!2-!-,'$-Q-!
L2!(#'%6)!('4'(.I&#*)!%'!.-2.I2-!4-(-!.-*-!-.&#:)W!4)(!.-*-!-,'$-Q-!J!'$!.-*-!*#,'$%#5$!*'!:-2)g
(-.#5$W!%#'$*)!I$-!OI$.#5$!*'2!:-2)(!4()4#)W!2-!*'6(-*-.#5$!.-I%-*-!J!2-!O('.I'$.#-!*'!2-!-,'$-g
Q-D!
L2! (#'%6)! ('4'(.I&#*)W! -2! .-2.I2-(%'! %)1('! 2)%! -.&#:)%! UI'! &#'$'$! :-2)(! 4()4#)W! 4'(,#&'! *'&'(,#$-(!
2-%!.)$%'.I'$.#-%!*'!2-%!#$.#*'$.#-%!&;.$#.-%!%)1('!2-!,#%#5$!*'2!%#%&',-!*'!#$O)(,-.#5$D!L%!4I'%!
I$-! 4('%'$&-.#5$! 6'('$.#-2! UI'! -JI*-! -! &),-(! I$-! *'! 2-%! *'.#%#)$'%! .(R&#.-%! *'! I$! -$82#%#%! *'!
(#'%6)%[!-.'4&-(!I$!.#'(&)!$#:'2!*'!(#'%6)D!!

Agregación de riesgos
T)%! 48((-O)%! -$&'(#)('%! *'&'(,#$-$! '2! (#'%6)! UI'! %)1('! I$! -.&#:)! &'$*(R-! I$-! -,'$-Q-! '$! ! I$-!
.#'(&-!*#,'$%#5$D!L%&)%!(#'%6)%!%#$6I2-('%!4I'*'$!-6('6-(%'!1-F)!.#'(&-%!.)$*#.#)$'%[!
   !"   4I'*'!-6('6-(%'!'2!(#'%6)!('4'(.I&#*)!%)1('!*#O'('$&'%!-.&#:)%W!
   !"   4I'*'!-6('6-(%'!'2!(#'%6)!-.I,I2-*)!%)1('!-.&#:)%!UI'!$)!%'-$!*'4'$*#'$&'%!'$&('!%RW!$#!
        *'4'$*-$!*'!$#$60$!-.&#:)!%I4'(#)(!.),0$W!
   !"   $)!*'1'!-6('6-(%'!'2!(#'%6)!-.I,I2-*)!%)1('!-.&#:)%!UI'!$)!%'-$!#$*'4'$*#'$&'%W!4I'%!'22)!
        %I4)$*(R-!%)1('!4)$*'(-(!'2!(#'%6)!-2!#$.2I#(!:-(#-%!:'.'%!'2!:-2)(!-.I,I2-*)!*'!-.&#:)%!%Ig
        4'(#)('%W!
   !"   4I'*'!-6('6-(%'!'2!(#'%6)!*'!*#O'('$&'%!-,'$-Q-%!%)1('!I$!,#%,)!-.&#:)W!-I$UI'!.)$:#'$'!
        .)$%#*'(-(!'$!UI;!,'*#*-!2-%!*#O'('$&'%!-,'$-Q-%!%)$!#$*'4'$*#'$&'%!J!4I'*'$!%'(!.)$.Ig
        (('$&'%W!
   !"   4I'*'!-6('6-(%'!'2!(#'%6)!*'!I$-!-,'$-Q-!'$!*#O'('$&'%!*#,'$%#)$'%D!

2.1.5. Paso 3: Salvaguardas
L$! 2)%! 4-%)%! -$&'(#)('%! $)! %'! V-$! &),-*)! '$! .)$%#*'(-.#5$! 2-%! %-2:-6I-(*-%! *'%42'6-*-%D! ]'!
,#*'$W!4)(!&-$&)W!2)%!#,4-.&)%!J!(#'%6)%!-!UI'!'%&-(R-$!'M4I'%&)%!2)%!-.&#:)%!%#!$)!%'!4()&'6#'(-$!
=!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%!              !                                 486#$-!<B!?*'!@ABC!
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit
Magerit

Más contenido relacionado

La actualidad más candente

Sao paulo sob-achaque
Sao paulo sob-achaqueSao paulo sob-achaque
Sao paulo sob-achaqueLuis Nassif
 
Beton prategang dan tahan gempa menggunakan metode pci
Beton prategang dan tahan gempa menggunakan metode pciBeton prategang dan tahan gempa menggunakan metode pci
Beton prategang dan tahan gempa menggunakan metode pciCut Nawalul Azka
 
Restauração vol 2
Restauração vol 2Restauração vol 2
Restauração vol 2artursil
 
Bolivia coca survey 2010 12 sept 2011
Bolivia coca survey 2010 12 sept 2011Bolivia coca survey 2010 12 sept 2011
Bolivia coca survey 2010 12 sept 2011Erbol Digital
 
A Data Commons in the Exchange Space
A Data Commons in the Exchange SpaceA Data Commons in the Exchange Space
A Data Commons in the Exchange SpaceDevin Foley
 
Matemática - Geometria de posição e métrica - Livro pdf
Matemática - Geometria de posição e métrica - Livro pdfMatemática - Geometria de posição e métrica - Livro pdf
Matemática - Geometria de posição e métrica - Livro pdfLucas pk'
 
Presentació de novetats d'IDEAS a botigues
Presentació de novetats d'IDEAS a botiguesPresentació de novetats d'IDEAS a botigues
Presentació de novetats d'IDEAS a botiguesadgrant
 
Manual de buenas prácticas al pintar
Manual de buenas prácticas al pintarManual de buenas prácticas al pintar
Manual de buenas prácticas al pintarSaul Carreter Raso
 
Interim Report of the Governor's Supplier Diversity Advisory Board
Interim Report of the Governor's Supplier Diversity Advisory BoardInterim Report of the Governor's Supplier Diversity Advisory Board
Interim Report of the Governor's Supplier Diversity Advisory BoardJon Hansen
 
10 Changes for 2009
10 Changes for 200910 Changes for 2009
10 Changes for 2009Guillaumeis
 
Launch of six new villages around Bodhgaya
Launch of six new villages around BodhgayaLaunch of six new villages around Bodhgaya
Launch of six new villages around Bodhgayashininghope
 
Matemática - Geometria Analítica - Livro pdf
Matemática - Geometria Analítica - Livro pdfMatemática - Geometria Analítica - Livro pdf
Matemática - Geometria Analítica - Livro pdfLucas pk'
 
Il supporto nutrizionale al paziente critico
Il supporto nutrizionale al paziente criticoIl supporto nutrizionale al paziente critico
Il supporto nutrizionale al paziente criticoFrancesco Barbero
 
Convergence Consulting Presentazione 2012
Convergence Consulting Presentazione 2012 Convergence Consulting Presentazione 2012
Convergence Consulting Presentazione 2012 Anne Ladawan
 
Analyst whitepaper idc-best-practices_in_business_continuity___disaster_recovery
Analyst whitepaper idc-best-practices_in_business_continuity___disaster_recoveryAnalyst whitepaper idc-best-practices_in_business_continuity___disaster_recovery
Analyst whitepaper idc-best-practices_in_business_continuity___disaster_recoveryCristian A Latapiat Gonzalez
 

La actualidad más candente (20)

Ruhani khazain vo 22
Ruhani khazain vo 22 Ruhani khazain vo 22
Ruhani khazain vo 22
 
Sao paulo sob-achaque
Sao paulo sob-achaqueSao paulo sob-achaque
Sao paulo sob-achaque
 
Beton prategang dan tahan gempa menggunakan metode pci
Beton prategang dan tahan gempa menggunakan metode pciBeton prategang dan tahan gempa menggunakan metode pci
Beton prategang dan tahan gempa menggunakan metode pci
 
Сім'я Шевченка - НУШ - 2018
Сім'я Шевченка - НУШ - 2018Сім'я Шевченка - НУШ - 2018
Сім'я Шевченка - НУШ - 2018
 
Restauração vol 2
Restauração vol 2Restauração vol 2
Restauração vol 2
 
CSDRM PM&Eguidelines
CSDRM PM&EguidelinesCSDRM PM&Eguidelines
CSDRM PM&Eguidelines
 
-The-Gurus-Guide-To-Better-Search-Engine-Marketing
-The-Gurus-Guide-To-Better-Search-Engine-Marketing-The-Gurus-Guide-To-Better-Search-Engine-Marketing
-The-Gurus-Guide-To-Better-Search-Engine-Marketing
 
Bolivia coca survey 2010 12 sept 2011
Bolivia coca survey 2010 12 sept 2011Bolivia coca survey 2010 12 sept 2011
Bolivia coca survey 2010 12 sept 2011
 
A Data Commons in the Exchange Space
A Data Commons in the Exchange SpaceA Data Commons in the Exchange Space
A Data Commons in the Exchange Space
 
Matemática - Geometria de posição e métrica - Livro pdf
Matemática - Geometria de posição e métrica - Livro pdfMatemática - Geometria de posição e métrica - Livro pdf
Matemática - Geometria de posição e métrica - Livro pdf
 
Presentació de novetats d'IDEAS a botigues
Presentació de novetats d'IDEAS a botiguesPresentació de novetats d'IDEAS a botigues
Presentació de novetats d'IDEAS a botigues
 
Manual de buenas prácticas al pintar
Manual de buenas prácticas al pintarManual de buenas prácticas al pintar
Manual de buenas prácticas al pintar
 
Hx c26
Hx c26Hx c26
Hx c26
 
Interim Report of the Governor's Supplier Diversity Advisory Board
Interim Report of the Governor's Supplier Diversity Advisory BoardInterim Report of the Governor's Supplier Diversity Advisory Board
Interim Report of the Governor's Supplier Diversity Advisory Board
 
10 Changes for 2009
10 Changes for 200910 Changes for 2009
10 Changes for 2009
 
Launch of six new villages around Bodhgaya
Launch of six new villages around BodhgayaLaunch of six new villages around Bodhgaya
Launch of six new villages around Bodhgaya
 
Matemática - Geometria Analítica - Livro pdf
Matemática - Geometria Analítica - Livro pdfMatemática - Geometria Analítica - Livro pdf
Matemática - Geometria Analítica - Livro pdf
 
Il supporto nutrizionale al paziente critico
Il supporto nutrizionale al paziente criticoIl supporto nutrizionale al paziente critico
Il supporto nutrizionale al paziente critico
 
Convergence Consulting Presentazione 2012
Convergence Consulting Presentazione 2012 Convergence Consulting Presentazione 2012
Convergence Consulting Presentazione 2012
 
Analyst whitepaper idc-best-practices_in_business_continuity___disaster_recovery
Analyst whitepaper idc-best-practices_in_business_continuity___disaster_recoveryAnalyst whitepaper idc-best-practices_in_business_continuity___disaster_recovery
Analyst whitepaper idc-best-practices_in_business_continuity___disaster_recovery
 

Destacado

Lo que necesita saber un técnico en sistemas - Mantenimiento.
Lo que necesita saber un técnico en sistemas - Mantenimiento.Lo que necesita saber un técnico en sistemas - Mantenimiento.
Lo que necesita saber un técnico en sistemas - Mantenimiento.Wendy Barco
 
Apuestas deportivas en nba
Apuestas deportivas en nbaApuestas deportivas en nba
Apuestas deportivas en nbasecondray9
 
Power point la estadística en las apuestas deportivas
Power point la estadística en las apuestas deportivasPower point la estadística en las apuestas deportivas
Power point la estadística en las apuestas deportivasPaginaWebWix92
 
Seguridad: Introducción a la seguridad informática
Seguridad: Introducción a la seguridad informáticaSeguridad: Introducción a la seguridad informática
Seguridad: Introducción a la seguridad informáticaFrancesc Perez
 
Pronósticos deportivos para ganar apuestas deportivas
Pronósticos deportivos para ganar apuestas deportivasPronósticos deportivos para ganar apuestas deportivas
Pronósticos deportivos para ganar apuestas deportivasAntonio Reinoso
 
4. Mantenimiento Del Sistema Informatico
4. Mantenimiento Del Sistema Informatico4. Mantenimiento Del Sistema Informatico
4. Mantenimiento Del Sistema InformaticoCANDIDO RUIZ
 

Destacado (7)

Lo que necesita saber un técnico en sistemas - Mantenimiento.
Lo que necesita saber un técnico en sistemas - Mantenimiento.Lo que necesita saber un técnico en sistemas - Mantenimiento.
Lo que necesita saber un técnico en sistemas - Mantenimiento.
 
Apuestas deportivas en nba
Apuestas deportivas en nbaApuestas deportivas en nba
Apuestas deportivas en nba
 
Fallos de la seguridad (diapositiva)
Fallos de la seguridad (diapositiva)Fallos de la seguridad (diapositiva)
Fallos de la seguridad (diapositiva)
 
Power point la estadística en las apuestas deportivas
Power point la estadística en las apuestas deportivasPower point la estadística en las apuestas deportivas
Power point la estadística en las apuestas deportivas
 
Seguridad: Introducción a la seguridad informática
Seguridad: Introducción a la seguridad informáticaSeguridad: Introducción a la seguridad informática
Seguridad: Introducción a la seguridad informática
 
Pronósticos deportivos para ganar apuestas deportivas
Pronósticos deportivos para ganar apuestas deportivasPronósticos deportivos para ganar apuestas deportivas
Pronósticos deportivos para ganar apuestas deportivas
 
4. Mantenimiento Del Sistema Informatico
4. Mantenimiento Del Sistema Informatico4. Mantenimiento Del Sistema Informatico
4. Mantenimiento Del Sistema Informatico
 

Más de Carlos Alberto Peláez Ayala (20)

Actividad semana 14_metodología_vf
Actividad semana 14_metodología_vfActividad semana 14_metodología_vf
Actividad semana 14_metodología_vf
 
Resultados grupo 2-5pm
Resultados grupo 2-5pmResultados grupo 2-5pm
Resultados grupo 2-5pm
 
Seginf
SeginfSeginf
Seginf
 
S15 bi v1-1
S15 bi v1-1S15 bi v1-1
S15 bi v1-1
 
SCM
SCMSCM
SCM
 
Soft libre
Soft libreSoft libre
Soft libre
 
Mod gov-ti
Mod gov-tiMod gov-ti
Mod gov-ti
 
Tallerpractico analisisderiesgos
Tallerpractico analisisderiesgosTallerpractico analisisderiesgos
Tallerpractico analisisderiesgos
 
It gov p1
It gov p1It gov p1
It gov p1
 
S14 scm
S14 scmS14 scm
S14 scm
 
Conferencia seguridad administración
Conferencia seguridad administraciónConferencia seguridad administración
Conferencia seguridad administración
 
Cloud vs grid
Cloud vs gridCloud vs grid
Cloud vs grid
 
Caso rotterdam s.a
Caso rotterdam s.aCaso rotterdam s.a
Caso rotterdam s.a
 
Autos rotterdam informatica_caso
Autos rotterdam informatica_casoAutos rotterdam informatica_caso
Autos rotterdam informatica_caso
 
Seguridad informatica v1
Seguridad informatica v1Seguridad informatica v1
Seguridad informatica v1
 
Cs10 1
Cs10 1Cs10 1
Cs10 1
 
Cs9
Cs9Cs9
Cs9
 
Rotterdam dani anis-lau-jhon
Rotterdam dani anis-lau-jhonRotterdam dani anis-lau-jhon
Rotterdam dani anis-lau-jhon
 
Auditoriaitvf
AuditoriaitvfAuditoriaitvf
Auditoriaitvf
 
Infraestructura ia
Infraestructura iaInfraestructura ia
Infraestructura ia
 

Magerit

  • 1. ! ! "#$#%&'(#)!*'! +*"#$#%&(+,#)$'%! -./0#,+%! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! MAGERIT – versión 2 "1234353678!41!+9:5;<;<!=!>1<2;?9!41!(;1<63<! 41!53<!%;<21@8<!41!#9A3B@8C;?9! ! I - Método ! D!"#$#%&'(#)!*'!+*"#$#%&(+,#)$'%!-./0#,+%! "84B;4E!FG!41!HI9;3!41!FGGJ! $#-)!KFJLGMLGNOLP! Catálogo general de publicaciones oficiales Q22RSTTRIU5;C8C;391<V84@;9;<2B8C;39V1<!! !
  • 2. ! EQUIPO RESPONSABLE DEL PROYECTO MAGERIT versión 2 ! Director: Francisco López Crespo "#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%! ! Miguel Angel Amutio Gómez "#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%! ! Javier Candau 3'$&()!3(#4&)256#.)!7-.#)$-2! ! Consultor externo: José Antonio Mañas 3-&'*(8&#.)! 9$#:'(%#*-*!/)2#&;.$#.-!*'!"-*(#*!
  • 3. "-6'(#&!:'(%#5$!<! Índice! 1. Introducción a Magerit ..................................................................................................6 @D@D!E1F'&#:)%!*'!"-6'(#& DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDG @D<D!H$&()*I..#5$!-2!-$82#%#%!J!6'%&#5$!*'!(#'%6)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDK @D>D!L2!-$82#%#%!J!6'%&#5$!*'!(#'%6)%!'$!%I!.)$&'M&)DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDN @D>D@D!3)$.#'$.#-.#5$!J!O)(,-.#5$DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDP @D>D<D!H$.#*'$.#-%!J!('.I4'(-.#5$ DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDP @DBD!E(6-$#Q-.#5$!*'!2-%!6IR-%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDP @DBD@D!")*)!*'!',42') DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@S @DBD<D!L2!.-&82)6)!*'!'2','$&)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@@ @DBD>D!T-!6IR-!*'!&;.$#.-%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@@ @DAD!/-(-!2)%!UI'!V-$!&(-1-F-*)!.)$!"-6'(#&!:@DSDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@< @DGD!L:-2I-.#5$W!.'(&#O#.-.#5$W!-I*#&)(R-!J!-.('*#&-.#5$DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@< @DKD!X3I8$*)!4().'*'!-$-2#Q-(!J!6'%&#)$-(!2)%!(#'%6)%Y DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@B 2. Realización del análisis y de la gestión .....................................................................16 <D@D!+$82#%#%!*'!Z#'%6)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@G <D@D@D!/-%)!@[!+.&#:)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@K <D@D<D!/-%)!<[!+,'$-Q-%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD<< <D@D>D!/-%)!B[!'&'(,#$-.#5$!*'2!#,4-.&) DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD<> <D@DBD!/-%)!A[!'&'(,#$-.#5$!*'2!(#'%6)DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD<B <D@DAD!/-%)!>[!]-2:-6I-(*-%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD<B <D@DGD!Z':#%#5$!*'2!4-%)!B[!#,4-.&)!('%#*I-2 DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD<G <D@DKD!Z':#%#5$!*'2!4-%)!A[!(#'%6)!('%#*I-2 DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD<G <D<D!^'%&#5$!*'!Z#'%6)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD<G <D<D@D!T-!#$&'(4('&-.#5$!*'!2)%!:-2)('%!*'!#,4-.&)!J!(#'%6)!('%#*I-2'% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD<G <D<D<D!]'2'..#5$!*'!%-2:-6I-(*-%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD<K <D<D>D!/;(*#*-%!J!6-$-$.#-% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD<N <D<DBD!T-!-.&#&I*!*'!2-!#('..#5$ DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD>S <D<DAD!Z':#%#5$!*'2!4-%)!@[!-.&#:)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD>@ 3. Estructuración del proyecto .......................................................................................32 >D@D!/-(&#.#4-$&'%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD>> >D<D!'%-(()22)!*'2!4()J'.&) DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD>B >D<D@D!_#%#5$!62)1-2 DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD>K >D>D!/().'%)!/@[!/2-$#O#.-.#5$DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD>N >D>D@D!+.&#:#*-*!+@D@[!L%&I*#)!*'!)4)(&I$#*-*DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDBS >D>D<D!+.&#:#*-*!+@D<[!'&'(,#$-.#5$!*'2!-2.-$.'!*'2!4()J'.&)DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDB< >D>D>D!+.&#:#*-*!+@D>[!/2-$#O#.-.#5$!*'2!4()J'.&) DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDBK >D>DBD!+.&#:#*-*!+@DB[!T-$Q-,#'$&)!*'2!4()J'.&)DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDAS >D>DAD!]R$&'%#%!*'2!4().'%)!/@ DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDAB >D>DGD!T#%&-!*'!.)$&()2!*'2!4().'%)!/@ DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDAB >DBD!/().'%)!/<[!+$82#%#%!*'!(#'%6)%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDAG >DBD@D!+.&#:#*-*!+<D@[!3-(-.&'(#Q-.#5$!*'!2)%!-.&#:)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDAN >DBD<D!+.&#:#*-*!+<D<[!3-(-.&'(#Q-.#5$!*'!2-%!-,'$-Q-%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDG> >DBD>D!+.&#:#*-*!+<D>[!3-(-.&'(#Q-.#5$!*'!2-%!%-2:-6I-(*-%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDGA >DBDBD!+.&#:#*-*!+<DB[!L%&#,-.#5$!*'2!'%&-*)!*'!(#'%6)DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDGK >DBDAD!]R$&'%#%!*'2!4().'%)!/< DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDKS >DBDGD!T#%&-!*'!.)$&()2!*'2!4().'%)!/< DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDK@ >DAD!/().'%)!/>[!^'%&#5$!*'!(#'%6)%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDK< >DAD@D!+.&#:#*-*!+>D@[!`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esarrollo de sistemas de información .....................................................................80 BD@D!H$#.#-2#Q-.#5$!*'!2)%!4().'%)%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDNS =!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%! ! 486#$-!>!?*'!@ABC!
  • 4. "-6'(#&!:'(%#5$!<! BD<D!3#.2)!*'!:#*-!*'!2-%!-42#.-.#)$'% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDN@ BD<D@D!/2-$!*'!%#%&',-% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDN@ BD>D!+$82#%#%!*'!(#'%6)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDN< BDBD!^'%&#5$!*'!(#'%6)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDN< BDAD!"a`ZH3+!:'(%#5$!>DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDNB BDAD@D!]/!b!]'6I(#*-*!*'2!4().'%)!*'!*'%-(()22)DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDNG BDAD<D!]]H!b!]'6I(#*-*!*'2!%#%&',-!*'!#$O)(,-.#5$DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDNN BDGD!Z'O'('$.#-% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDP< 5. Consejos prácticos......................................................................................................94 AD@D!/-(-!#*'$&#O#.-(!-.&#:)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDPB AD<D!/-(-!*'%.I1(#(!J!,)*'2-(!2-%!*'4'$*'$.#-%!'$&('!-.&#:)%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDPA AD>D!/-(-!:-2)(-(!-.&#:)%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDPK ADBD!/-(-!#*'$&#O#.-(!-,'$-Q-%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDPN ADAD!/-(-!:-2)(-(!-,'$-Q-% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDPN ADGD!/-(-!%'2'..#)$-(!%-2:-6I-(*-% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDPP ADKD!+4()M#,-.#)$'%!%I.'%#:-% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDPP ADKD@D!/()&'..#5$!18%#.- DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@SS ADND!Z'O'('$.#-% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@S@ Apéndice 1. Glosario .....................................................................................................102 @D@D!`;(,#$)%!'$!'%4-c)2DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@S< @D<D!`;(,#$)%!-$62)%-F)$'% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@SP @D>D!H]EdHL3!^I#*'!K>[<SS<DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@@S @DBD!Z'O'('$.#-% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@@@ Apéndice 2. Referencias ...............................................................................................113 Apéndice 3. Marco legal ................................................................................................114 >D@D!/().'*#,#'$&)!-*,#$#%&(-&#:) DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@@B >D<D!/()&'..#5$!*'!*-&)%!*'!.-(8.&'(!4'(%)$-2DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@@B >D>D!e#(,-!'2'.&(5$#.-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@@B >DBD!H$O)(,-.#5$!.2-%#O#.-*-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@@A >DAD!]'6I(#*-*!*'!2-%!('*'%!J!*'!2-!#$O)(,-.#5$ DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@@A Apéndice 4. Marco de evaluación y certificación .......................................................116 BD@D!]#%&',-%!*'!6'%&#5$!*'!2-!%'6I(#*-*!*'!2-!#$O)(,-.#5$!?]^]HC DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@@G BD@D@D!T-!.'(&#O#.-.#5$DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@@K BD@D<D!T-!-.('*#&-.#5$!*'!2-!'$&#*-*!.'(&#O#.-*)(- DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@@P BD@D>D!`'(,#$)2)6R-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@<S BD@DBD!Z'O'('$.#-%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@<@ BD<D!3(#&'(#)%!.),I$'%!*'!':-2I-.#5$!?33CDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@<@ BD<D@D!f'$'O#.#-(#)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@<< BD<D<D!Z'UI#%#&)%!*'!%'6I(#*-* DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@<> BD<D>D!3('-.#5$!*'!4'(O#2'%!*'!4()&'..#5$ DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@<B BD<DBD!9%)!*'!4()*I.&)%!.'(&#O#.-*)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@<A BD<DAD!`'(,#$)2)6R-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@<A BD<DGD!Z'O'('$.#-%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@<G Apéndice 5. Herramientas.............................................................................................128 AD@D!/HT+Z DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@<P AD<D!Z'O'('$.#-% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@>S Apéndice 6. Evolución de Magerit versión 1.0 ............................................................131 GD@D!T#1()!HD!^IR-!*'!-4()M#,-.#5$!-!2-!%'6I(#*-*!*'!2)%!%#%&',-%!*'!#$O)(,-.#5$ DDDDDDDDDDDDDDDDDD@>@ GD<D!T#1()!HHD!^IR-!*'!4().'*#,#'$&)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@>@ GD>D!T#1()!HHHD!^IR-!*'!&;.$#.-% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@>< GDBD!T#1()!H_D!^IR-!4-(-!*'%-(()22-*)('%!*'!-42#.-.#)$'% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@>< GDAD!T#1()!_D!^IR-!4-(-!('%4)$%-12'%!*'2!*),#$#)!4()&'6#12' DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@>> GDGD!T#1()!_HD!+(UI#&'.&I(-!*'!2-!#$O)(,-.#5$!J!'%4'.#O#.-.#)$'%!*'!2-!#$&'(O-Q!4-(-!'2!#$&'(.-,1#)! *'!*-&)%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@>> GDKD!T#1()!_HHD!Z'O'('$.#-!*'!$)(,-%!2'6-2'%!J!&;.$#.-% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@>> =!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%! ! 486#$-!B!?*'!@ABC!
  • 5. "-6'(#&!:'(%#5$!<! Apéndice 7. Caso práctico ............................................................................................134 KD@D!T-!V#%&)(#-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@>B KD<D!/().'%)!/<[!+$82#%#%!*'!(#'%6)%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@>A KD<D@D!`-('-!`<D@D@D!H*'$&#O#.-.#5$!*'!-.&#:)% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@>K KD<D<D!`-('-!`<D@D<[!'4'$*'$.#-% DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@>N KD<D>D!`-('-!`<D@D>[!_-2)(-.#5$ DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@>P KD<DBD!+.&#:#*-*!+<D<[!3-(-.&'(#Q-.#5$!*'!2-%!-,'$-Q-%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@B@ KD<DAD!+.&#:#*-*!+<DB[!L%&#,-.#5$!*'!#,4-.&)!J!(#'%6) DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@B< KD<DGD!+.&#:#*-*!+<D>[!3-(-.&'(#Q-.#5$!*'!2-%!%-2:-6I-(*-%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@BA KD<DKD!+.&#:#*-*!+<DB[!L%&#,-.#5$!*'2!'%&-*)!*'!(#'%6)DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@BN KD>D!/().'%)!/>[!^'%&#5$!*'!(#'%6)%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@AS KD>D@D!+.&#:#*-*!+>D@[!`),-!*'!*'.#%#)$'%DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@AS KD>D<D!+.&#:#*-*!+>D<[!/2-$!*'!%'6I(#*-*DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@A@ KD>D>D!L:)2I.#5$!*'!2)%!#$*#.-*)('%!*'!#,4-.&)!J!(#'%6) DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@A< KD>DBD!3-2#O#.-.#5$!%'60$!2)%!3(#&'(#)%!*'!]'6I(#*-*!*'2!3]+LDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@AB KD>DAD!3-2#O#.-.#5$!%'60$!2-!$)(,-!H]EdHL3!@KKPP[<SSA DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD@AB ! =!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%! ! 486#$-!A!?*'!@ABC!
  • 6. "-6'(#&!:'(%#5$!<! ! H$&()*I..#5$! 1. Introducción a Magerit L2!3]+L @!V-!'2-1)(-*)!J!4(),I':'!"-6'(#& <!.),)!('%4I'%&-!-!2-!4'(.'4.#5$!*'!UI'!2-!+*,#$#%g &(-.#5$!?J!'$!6'$'(-2!&)*-!2-!%).#'*-*C!*'4'$*'!*'!O)(,-!.('.#'$&'!*'!2-%!&'.$)2)6R-%!*'!2-!#$O)(g ,-.#5$!4-(-!2-!.)$%'.I.#5$!*'!%I%!)1F'&#:)%!*'!%'(:#.#)D!T-!(-Q5$!*'!%'(!*'!"-6'(#&!'%&8!*#('.&-g ,'$&'!('2-.#)$-*-!.)$!2-!6'$'(-2#Q-.#5$!*'2!I%)!*'!2)%!,'*#)%!'2'.&(5$#.)%W!#$O)(,8&#.)%!J!&'2',8g &#.)%W!UI'!%I4)$'!I$)%!1'$'O#.#)%!':#*'$&'%!4-(-!2)%!.#I*-*-$)%h!4'()!&-,1#;$!*-!2I6-(!-!.#'(&)%! (#'%6)%! UI'! *'1'$! ,#$#,#Q-(%'! .)$! ,'*#*-%! *'! %'6I(#*-*! UI'! 6'$'('$! .)$O#-$Q-! '$! '2! I%)! *'! &-2'%!,'*#)%D! L$!'2!4'(#)*)!&(-$%.I((#*)!*'%*'!2-!4I12#.-.#5$!*'!2-!4(#,'(-!:'(%#5$!*'!"-6'(#&!?@PPKC!V-%&-!2-! O'.V-W!'2!-$82#%#%!*'!(#'%6)%!%'!V-!:'$#*)!.)$%)2#*-$*)!.),)!4-%)!$'.'%-(#)!4-(-!2-!6'%&#5$!*'!2-! %'6I(#*-*D!+%R!%'!('.)6'!.2-(-,'$&'!'$!2-%!^IR-%!*'!2-!E3L >!UI'W!'$!%I!4(#$.#4#)!G!*#.'$[! 6) Evaluación del riesgo. Los participantes deben llevar a cabo evaluaciones de riesgo. L%&-!,'&)*)2)6R-!#$&'('%-!-!&)*)%!-UI'22)%!UI'!&(-1-F-$!.)$!#$O)(,-.#5$!,'.-$#Q-*-!J!2)%!%#%&'g ,-%!#$O)(,8&#.)%!UI'!2-!&(-&-$D!]#!*#.V-!#$O)(,-.#5$!)!2)%!%'(:#.#)%!UI'!%'!4('%&-$!6(-.#-%!-!'22-! %)$!:-2#)%)%W!'%&-!,'&)*)2)6R-!2'%!4'(,#&#(8!%-1'(!.I8$&)!*'!'%&'!:-2)(!'%&8!'$!FI'6)!J!2'%!-JI*-g (8!-!4()&'6'(2)D! 3)$).'(!'2!(#'%6)!-2!UI'!'%&8$!%),'&#*)%!2)%!'2','$&)%!*'!&(-1-F)!'%W!%#,42','$&'W!#,4('%.#$*#g 12'!4-(-!4)*'(!6'%&#)$-(2)%!J!4)(!'22)!V-$!-4-('.#*)!,I2&#&I*!*'!6IR-%!#$O)(,-2'%W!-4()M#,-.#)$'%! ,'&5*#.-%!J!V'((-,#'$&-%!*'!%)4)(&'!&)*-%!2-%!.I-2'%!1I%.-$!)1F'&#:-(!'2!-$82#%#%!4-(-!%-1'(!.I8$! %'6I()%!?)!#$%'6I()%C!'%&8$!J!$)!22-,-(%'!-!'$6-c)D!L2!6(-$!('&)!*'!&)*-%!'%&-%!-4()M#,-.#)$'%! '%!2-!.),42'F#*-*!*'2!4()12',-!-2!UI'!%'!'$O('$&-$h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g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bjetivos de Magerit "-6'(#&!4'(%#6I'!2)%!%#6I#'$&'%!)1F'&#:)%[! #('.&)%[! @D! .)$.#'$.#-(!-!2)%!('%4)$%-12'%!*'!2)%!%#%&',-%!*'!#$O)(,-.#5$!*'!2-!'M#%&'$.#-!*'!(#'%6)%!J! *'!2-!$'.'%#*-*!*'!-&-F-(2)%!-!&#',4)! <D! )O('.'(!I$!,;&)*)!%#%&',8&#.)!4-(-!-$-2#Q-(!&-2'%!(#'%6)%! >D! -JI*-(!-!*'%.I1(#(!J!42-$#O#.-(!2-%!,'*#*-%!)4)(&I$-%!4-(-!,-$&'$'(!2)%!(#'%6)%!1-F)!.)$&()2! ! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! @! 3]+L[!3)$%'F)!]I4'(#)(!*'!+*,#$#%&(-.#5$!L2'.&(5$#.-D! <! "+^LZH`[!"'&)*)2)6R-!*'!+$82#%#%!J!^'%&#5$!*'!Z#'%6)%!*'!2)%!]#%&',-%!*'!H$O)(,-.#5$! >! ^IR-%!*'!2-!E3L!4-(-!2-!%'6I(#*-*!*'!2)%!%#%&',-%!*'!#$O)(,-.#5$!J!('*'%D!i-.#-!I$-!.I2&I(-!*'!%'6Ig (#*-*D!<SS<D! =!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%! ! 486#$-!G!?*'!@ABC!
  • 7. "-6'(#&!:'(%#5$!<! ! H$&()*I..#5$! H$*#('.&)%[! BD! 4('4-(-(!-!2-!E(6-$#Q-.#5$!4-(-!4().'%)%!*'!':-2I-.#5$W!-I*#&)(R-W!.'(&#O#.-.#5$!)!-.('*#&-g .#5$W!%'60$!.)(('%4)$*-!'$!.-*-!.-%)! `-,1#;$!%'!V-!1I%.-*)!2-!I$#O)(,#*-*!*'!2)%!#$O)(,'%!UI'!('.)6'$!2)%!V-22-Q6)%!J!2-%!.)$.2I%#)g $'%!*'!I$!4()J'.&)!*'!-$82#%#%!J!6'%&#5$!*'!(#'%6)%[! Modelo de valor 3-(-.&'(#Q-.#5$!*'2!:-2)(!UI'!('4('%'$&-$!2)%!-.&#:)%!4-(-!2-!E(6-$#Q-.#5$!-%R!.),)!*'!2-%! *'4'$*'$.#-%!'$&('!2)%!*#O'('$&'%!-.&#:)%D! Mapa de riesgos Z'2-.#5$!*'!2-%!-,'$-Q-%!-!UI'!'%&8$!'M4I'%&)%!2)%!-.&#:)%D! Evaluación de salvaguardas L:-2I-.#5$!*'!2-!'O#.-.#-!*'!2-%!%-2:-6I-(*-%!'M#%&'$&'%!'$!('2-.#5$!-2!(#'%6)!UI'!-O()$&-$D! Estado de riesgo 3-(-.&'(#Q-.#5$! *'! 2)%! -.&#:)%! 4)(! %I! (#'%6)! ('%#*I-2h! '%! *'.#(W! 4)(! 2)! UI'! 4I'*'! 4-%-(! &)g ,-$*)!'$!.)$%#*'(-.#5$!2-%!%-2:-6I-(*-%!*'%42'6-*-%D! Informe de insuficiencias +I%'$.#-! )! *'1#2#*-*! *'! 2-%! %-2:-6I-(*-%! UI'! -4-('.'$! .),)! )4)(&I$-%! 4-(-! ('*I.#(! 2)%! (#'%6)%!%)1('!'2!%#%&',-D! Plan de seguridad 3)$FI$&)!*'!4()6(-,-%!*'!%'6I(#*-*!UI'!4'(,#&'$!,-&'(#-2#Q-(!2-%!*'.#%#)$'%!*'!6'%&#5$!*'! (#'%6)%! 1.2. Introducción al análisis y gestión de riesgos ]'6I(#*-*!'%!2-!.-4-.#*-*!*'!2-%!('*'%!)!*'!2)%!%#%&',-%!*'!#$O)(,-.#5$!4-(-!('%#%&#(W!.)$!I$!*'g &'(,#$-*)! $#:'2! *'! .)$O#-$Q-W! 2)%! -..#*'$&'%! )! -..#)$'%! #2R.#&-%! )! ,-2#$&'$.#)$-*-%! UI'!.),4()g ,'&-$! 2-! *#%4)$#1#2#*-*W! -I&'$&#.#*-*W! #$&'6(#*-*! J! .)$O#*'$.#-2#*-*! *'! 2)%! *-&)%! -2,-.'$-*)%! )! &(-$%,#&#*)%!J!*'!2)%!%'(:#.#)%!UI'!*#.V-%!('*'%!J!%#%&',-%!)O('.'$!)!V-.'$!-..'%#12'%D! L2!)1F'&#:)!-!4()&'6'(!'%!2-!,#%#5$!*'!2-!E(6-$#Q-.#5$W!&'$#'$*)!'$!.I'$&-!2-%!*#O'('$&'%!*#,'$%#)g $'%!*'!2-!%'6I(#*-*[! Disponibilidad: )!*#%4)%#.#5$!*'!2)%!%'(:#.#)%!-!%'(!I%-*)%!.I-$*)!%'-!$'.'%-(#)D!T-!.-('$.#-!*'!*#%4)$#1#g 2#*-*!%I4)$'!I$-!#$&'((I4.#5$!*'2!%'(:#.#)D!T-!*#%4)$#1#2#*-*!-O'.&-!*#('.&-,'$&'!-!2-!4()*I.g &#:#*-*!*'!2-%!)(6-$#Q-.#)$'%D! Integridad: )!,-$&'$#,#'$&)!*'!2-%!.-(-.&'(R%&#.-%!*'!.),42'&#&I*!J!.)(('..#5$!*'!2)%!*-&)%D!3)$&(-!2-!#$g &'6(#*-*W! 2-! #$O)(,-.#5$! 4I'*'! -4-('.'(! ,-$#4I2-*-W! .)((I4&-! )! #$.),42'&-D! T-! #$&'6(#*-*! -O'.&-!*#('.&-,'$&'!-2!.)(('.&)!*'%',4'c)!*'!2-%!OI$.#)$'%!*'!I$-!E(6-$#Q-.#5$D! Confidencialidad: )!UI'!2-!#$O)(,-.#5$!22'6I'!%)2-,'$&'!-!2-%!4'(%)$-%!-I&)(#Q-*-%D!3)$&(-!2-!.)$O#*'$.#-2#*-*! )!%'.('&)!4I'*'$!*-(%'!OI6-%!J!O#2&(-.#)$'%!*'!#$O)(,-.#5$W!-%R!.),)!-..'%)%!$)!-I&)(#Q-g *)%D! T-! .)$O#*'$.#-2#*-*! '%! I$-! 4()4#'*-*! *'! *#OR.#2! ('.I4'(-.#5$W! 4I*#'$*)! ,#$-(! 2-! .)$g O#-$Q-!*'!2)%!*',8%!'$!2-!)(6-$#Q-.#5$!UI'!$)!'%!*#2#6'$&'!'$!'2!,-$&'$#,#'$&)!*'2!%'.('&)W! J! 4I*#'$*)! %I4)$'(! '2! #$.I,42#,#'$&)! *'! 2'J'%! J! .),4(),#%)%! .)$&(-.&I-2'%! ('2-&#:)%! -! 2-! .I%&)*#-!*'!2)%!*-&)%D! Autenticidad (de quién hace uso de los datos o servicios): )!UI'!$)!V-J-!*I*-!*'!UI#;$!%'!V-.'!('%4)$%-12'!*'!I$-!#$O)(,-.#5$!)!4('%&-.#5$!*'!I$! %'(:#.#)W! &-$&)! -! O#$! *'! .)$O#-(! '$! ;2! .),)! *'! 4)*'(! 4'(%'6I#(! 4)%&'(#)(,'$&'! 2)%! #$.I,42#g ,#'$&)%!)!'(()('%D!3)$&(-!2-!-I&'$&#.#*-*!%'!*-$!%I42-$&-.#)$'%!J!'$6-c)%!UI'!1I%.-$!('-g =!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%! ! 486#$-!K!?*'!@ABC!
  • 8. "-6'(#&!:'(%#5$!<! ! H$&()*I..#5$! 2#Q-(!I$!O(-I*'D!T-!-I&'$&#.#*-*!'%!2-!1-%'!4-(-!4)*'(!2I.V-(!.)$&(-!'2!('4I*#)!JW!.),)!&-2W! OI$*-,'$&-! '2! .),'(.#)! '2'.&(5$#.)! )! 2-! -*,#$#%&(-.#5$! '2'.&(5$#.-W! 4'(,#&#'$*)! .)$O#-(! %#$! 4-4'2'%!$#!4('%'$.#-!OR%#.-D! `)*-%! '%&-%! .-(-.&'(R%&#.-%! 4I'*'$! %'(! ('UI'(#*-%! )! $)! *'4'$*#'$*)! *'! .-*-! .-%)D! 3I-$*)! %'! ('UI#'('$W!$)!'%!':#*'$&'!UI'!%'!*#%O(I&'$!%#$!,8%D!T)!V-1#&I-2!UI'!V-J-!UI'!4)$'(!,'*#)%!J!'%g OI'(Q)!4-(-!.)$%'6I#(2-%D!+!(-.#)$-2#Q-(!'%&'!'%OI'(Q)!%'!*'*#.-$!2-%!,'&)*)2)6R-%!*'!-$82#%#%!J! 6'%&#5$!*'!(#'%6)%!UI'!.),#'$Q-$!.)$!I$-!*'O#$#.#5$[! Riesgo: '%&#,-.#5$!*'2!6(-*)!*'!'M4)%#.#5$!-!UI'!I$-!-,'$-Q-!%'!,-&'(#-2#.'!%)1('!I$)!)!,8%!-.g &#:)%!.-I%-$*)!*-c)%!)!4'(FI#.#)%!-!2-!E(6-$#Q-.#5$D! L2!(#'%6)!#$*#.-!2)!UI'!2'!4)*(R-!4-%-(!-!2)%!-.&#:)%!%#!$)!%'!4()&'6#'(-$!-*'.I-*-,'$&'D!L%!#,g 4)(&-$&'!%-1'(!UI;!.-(-.&'(R%&#.-%!%)$!*'!#$&'(;%!'$!.-*-!-.&#:)W!-%R!.),)!%-1'(!'$!UI;!,'*#*-! '%&-%!.-(-.&'(R%&#.-%!'%&8$!'$!4'2#6()W!'%!*'.#(W!-$-2#Q-(!'2!%#%&',-[! Análisis de riesgos: 4().'%)!%#%&',8&#.)!4-(-!'%&#,-(!2-!,-6$#&I*!*'!2)%!(#'%6)%!-!UI'!'%&8!'M4I'%&-!I$-!E(6-g $#Q-.#5$D! ]-1#'$*)!2)!UI'!4)*(R-!4-%-(W!V-J!UI'!&),-(!*'.#%#)$'%[! Gestión de riesgos: %'2'..#5$!'!#,42-$&-.#5$!*'!%-2:-6I-(*-%!4-(-!.)$).'(W!4(':'$#(W!#,4'*#(W!('*I.#(!)!.)$&()g 2-(!2)%!(#'%6)%!#*'$&#O#.-*)%D! 75&'%'!UI'!I$-!)4.#5$!2'6R&#,-!'%!-.'4&-(!'2!(#'%6)D!L%!O('.I'$&'!)R(!UI'!2-!%'6I(#*-*!-1%)2I&-! $)!'M#%&'h!'$!'O'.&)W!%#',4('!V-J!UI'!-.'4&-(!I$!(#'%6)!UI'W!'%)!%RW!*'1'!%'(!.)$).#*)!J!%),'&#*)! -2!I,1(-2!*'!.-2#*-*!UI'!%'!('UI#'('!*'2!%'(:#.#)D! 3),)!&)*)!'%&)!'%!,IJ!*'2#.-*)W!$)!'%!,'(-,'$&'!&;.$#.)W!'!#$.2IJ'!2-!*'.#%#5$!*'!-.'4&-(!I$! .#'(&)! $#:'2! *'! (#'%6)W! *':#'$'! #,4('%.#$*#12'! %-1'(! '$! UI;! .)$*#.#)$'%! %'! &(-1-F-! J! -%R! 4)*'(! -FI%&-(!2-!.)$O#-$Q-!UI'!,'('.'!'2!%#%&',-D!/-(-!'22)!UI;!,'F)(!UI'!I$-!-4()M#,-.#5$!,'&5*#.-! UI'!4'(,#&-!&),-(!*'.#%#)$'%!.)$!OI$*-,'$&)!J!'M42#.-(!(-.#)$-2,'$&'!2-%!*'.#%#)$'%!&),-*-%D! 1.3. El análisis y gestión de riesgos en su contexto T-%!&-('-%!*'!-$82#%#%!J!6'%&#5$!*'!(#'%6)%!$)!%)$!I$!O#$!'$!%R!,#%,-%!%#$)!UI'!%'!'$.-F-$!'$!2-! -.&#:#*-*!.)$&#$I-!*'!6'%&#5$!*'!2-!%'6I(#*-*D! L2!-$82#%#%!*'!(#'%6)%!4'(,#&'!*'&'(,#$-(!.5,)!'%W!.I8$&)!:-2'!J!.5,)!*'!4()&'6#*)%!%'!'$.I'$g &(-$!2)%!-.&#:)%D!L$!.))(*#$-.#5$!.)$!2)%!)1F'&#:)%W!'%&(-&'6#-!J!4)2R&#.-!*'!2-!E(6-$#Q-.#5$W!2-%!-.g &#:#*-*'%!*'!6'%&#5$!*'!(#'%6)%!4'(,#&'$!'2-1)(-(!I$!42-$!*'!%'6I(#*-*!UI'W!#,42-$&-*)!J!)4'(-g *)W! %-&#%O-6-! 2)%! )1F'&#:)%! 4()4I'%&)%! .)$!'2!$#:'2!*'!(#'%6)!UI'!%'!-.'4&-!2-! análisis y gestión análisis y gestión #('..#5$D! de riesgos objetivos, estrategia objetivos, estrategia de riesgos y política y política T-! #,42-$&-.#5$! *'! 2)%! .)$&()2'%! *'! %'6I(#*-*! ('UI#'('! I$-! )(6-$#Q-.#5$! 6'%&#)$-*-! J! 2-! 4-(&#.#4-.#5$! #$O)(,-g planificación planificación *-!*'!&)*)!'2!4'(%)$-2!UI'!&(-1-F-!.)$! organización organización '2! %#%&',-! *'! #$O)(,-.#5$D! L%! '%&'! 4'(%)$-2! '2! ('%4)$%-12'! *'! 2-! )4'(-g .#5$! *#-(#-W! *'! 2-! ('-..#5$! -$&'! #$.#g implantación de implantación de *'$.#-%! J! *'! 2-! ,)$#&)(#Q-.#5$! '$! 6'g salvaguardas concienciación concienciación salvaguardas $'(-2! *'2! %#%&',-! 4-(-! *'&'(,#$-(! %#! y formación y formación %-&#%O-.'! .)$! 'O#.-.#-! J! 'O#.#'$.#-! 2)%! )1F'&#:)%!4()4I'%&)%D! gestión de config. gestión de config. L%&'!'%UI',-!*'!&(-1-F)!*'1'!%'(!('g y cambios y cambios incidencias y incidencias y 4'&#&#:)! 4I'%! 2)%! %#%&',-%! *'! #$O)(,-g recuperación recuperación .#5$! (-(-! :'Q! %)$! #$,I&-12'%h! ,8%! =!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%! ! 486#$-!N!?*'!@ABC!
  • 9. "-6'(#&!:'(%#5$!<! ! H$&()*I..#5$! 1#'$!%'!'$.I'$&(-$!%),'&#*)%!-!':)2I.#5$!.)$&#$I-!&-$&)!4()4#-!?$I':)%!-.&#:)%C!.),)!*'2!'$&)(g $)!?$I':-%!-,'$-Q-%CW!2)!UI'!'M#6'!I$-!(':#%#5$!4'(#5*#.-!'$!2-!UI'!%'!-4('$*'!*'!2-!'M4'(#'$.#-! J!%'!-*-4&-!-2!$I':)!.)$&'M&)D! L2!-$82#%#%!*'!(#'%6)%!4()4)(.#)$-!I$!,)*'2)!*'2!%#%&',-!'$!&;(,#$)%!*'!-.&#:)%W!-,'$-Q-%!J!%-2g :-6I-(*-%W!J!'%!2-!4#'*(-!-$6I2-(!4-(-!.)$&()2-(!&)*-%!2-%!-.&#:#*-*'%!.)$!OI$*-,'$&)D!T-!6'%&#5$! *'!(#'%6)%!'%!2-!'%&(I.&I(-.#5$!*'!2-%!-..#)$'%!*'!%'6I(#*-*!4-(-!%-&#%O-.'(!2-%!$'.'%#*-*'%!*'g &'.&-*-%!4)(!'2!-$82#%#%D! 1.3.1. Concienciación y formación L2!,'F)(!42-$!*'!%'6I(#*-*!%'!:'(R-!%'(#-,'$&'!V#4)&'.-*)!%#$!I$-!.)2-1)(-.#5$!-.&#:-!*'!2-%!4'(g %)$-%!#$:)2I.(-*-%!'$!'2!%#%&',-!*'!#$O)(,-.#5$W!'%4'.#-2,'$&'!%#!2-!-.&#&I*!'%!$'6-&#:-W!.)$&(-(#-! )!*'!j2I.V-(!.)$&(-!2-%!,'*#*-%!*'!%'6I(#*-*kD!L%!4)(!'22)!UI'!%'!('UI#'('!2-!.('-.#5$!*'!I$-!j.I2g &I(-!*'!%'6I(#*-*k!UI'W!',-$-$*)!*'!2-!-2&-!*#('..#5$W!.)$.#'$.#'!-!&)*)%!2)%!#$:)2I.(-*)%!*'!%I! $'.'%#*-*!J!4'(&#$'$.#-D! ])$!*)%!2)%!4#2-('%!OI$*-,'$&-2'%!4-(-!2-!.('-.#5$!*'!'%&-!.I2&I(-[! !" I$-!4)2R&#.-!*'!%'6I(#*-*!.)(4)(-&#:-!UI'!%'!'$&#'$*-!?'%.(#&-!4-(-!2)%!UI'!$)!%)$!'M4'(&)%! '$!2-!,-&'(#-CW!UI'!%'!*#OI$*-!J!UI'!%'!,-$&'$6-!-2!*R-! !" I$-!O)(,-.#5$!.)$&#$I-!-!&)*)%!2)%!$#:'2'%W!('.)(*-$*)!2-%!.-I&'2-%!(I&#$-(#-%!J!2-%!-.&#:#*-g *'%!'%4'.#-2#Q-*-%W!%'60$!2-!('%4)$%-1#2#*-*!-*%.(#&-!-!.-*-!4I'%&)!*'!&(-1-F)! +!O#$!*'!UI'!'%&-%!-.&#:#*-*'%!.I-F'$!'$!2-!)(6-$#Q-.#5$W!'%!#,4('%.#$*#12'!UI'!2-!%'6I(#*-*!%'-! !" ,R$#,-,'$&'! #$&(I%#:-[! UI'! $)! *#O#.I2&'! #$$'.'%-(#-,'$&'! 2-! -.&#:#*-*! *#-(#-! $#! V#4)&'UI'! -2.-$Q-(!2)%!)1F'&#:)%!*'!4()*I.&#:#*-*!4()4I'%&)%W! !" %'-!j$-&I(-2k[!UI'!$)!*'!4#'!-!'(()('%!6(-&I#&)%W!UI'!O-.#2#&'!'2!.I,42#,#'$&)!*'!2-%!1I'$-%! 4(8.&#.-%!4()4I'%&-%!J! !" 4(-.&#.-*-!4)(!2-!#('..#5$[!UI'!*;!'F',42)!'$!2-!-.&#:#*-*!*#-(#-!J!('-..#)$'!.)$!4('%&'Q-! -!2)%!.-,1#)%!'!#$.#*'$.#-%D! 1.3.2. Incidencias y recuperación ]#,;&(#.-,'$&'W!2-%!4'(%)$-%!#$:)2I.(-*-%!*'1'$!%'(!.)$%.#'$&'%!*'!%I!4-4'2!J!('2':-$.#-!.)$&#g $I-!4-(-!4(':'$#(!4()12',-%!J!('-..#)$-(!.I-$*)!%'!4()*IQ.-$D!L%!#,4)(&-$&'!.('-(!I$-!.I2&I(-! *'!('%4)$%-1#2#*-*!*)$*'!2)%!4)&'$.#-2'%!4()12',-%W!*'&'.&-*)%!4)(!2)%!UI'!'%&8$!.'(.-$)%!-!2)%! -.&#:)%!-O'.&-*)%W!4I'*-$!%'(!.-$-2#Q-*)%!V-.#-!2)%!4I$&)%!*'!*'.#%#5$D!'!'%&-!O)(,-!'2!%#%&',-! *'!%-2:-6I-(*-%!('%4)$*'(8!-!2-!('-2#*-*D! 3I-$*)!%'!4()*I.'!I$-!#$.#*'$.#-W!'2!&#',4)!',4#'Q-!-!.)(('(!'$!.)$&(-!*'2!%#%&',-[!%I!%I4'(:#g :'$.#-! *'4'$*'! *'! 2-! 4('%&'Q-! J! .)(('..#5$! *'! 2-%! -.&#:#*-*'%! *'! ('4)(&'! J! ('-..#5$D! 3I-2UI#'(! '(()(W!#,4('.#%#5$!)!-,1#6l'*-*!'$!'%&)%!,),'$&)%!.(R&#.)%W!%'!:'!-,42#O#.-*)!.)$:#(&#'$*)!2)!UI'! 4)*R-!%'(!I$!,'()!#$.#*'$&'!'$!I$!*'%-%&('D! `-$&)!*'!2)%!;M#&)%!.),)!*'!2)%!O(-.-%)%!.)$:#'$'!-4('$*'(!.)$&#$I-,'$&'!'!#$.)(4)(-(2)%!-2!4()g .'%)!*'!-$82#%#%!J!6'%&#5$!*'!(#'%6)%D!T-!,-*I('Q!*'!I$-!)(6-$#Q-.#5$!%'!('O2'F-!'$!2-!4I2.(#&I*!J! ('-2#%,)!*'!%I!,)*'2)!*'!:-2)(!JW!.)$%'.I'$&','$&'W!'$!2-!#*)$'#*-*!*'!2-%!%-2:-6I-(*-%!*'!&)g *)!&#4)W!*'%*'!,'*#*-%!&;.$#.-%!V-%&-!I$-!54&#,-!)(6-$#Q-.#5$D! 1.4. Organización de las guías L%&-! :'(%#5$! <! *'! "-6'(#&! %'! V-! '%&(I.&I(-*)! '$! &('%! 2#1()%[! ;%&'W! UI'! *'%.(#1'! jL2! ";&)*)kW! I$! m3-&82)6)!*'!L2','$&)%m!J!I$-!m^IR-!*'!`;.$#.-%mD! L%&-!6IR-!*'%.(#1'!2-!,'&)*)2)6R-!*'%*'!&('%!8$6I2)%[! !" L2!.-4R&I2)!<!*'%.(#1'!2)%!4-%)%!4-(-!('-2#Q-(!I$!-$82#%#%!*'2!'%&-*)!*'!(#'%6)!J!4-(-!6'%&#)g $-(!%I!,#&#6-.#5$D!L%!I$-!4('%'$&-.#5$!$'&-,'$&'!.)$.'4&I-2D! =!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%! ! 486#$-!P!?*'!@ABC!
  • 10. "-6'(#&!:'(%#5$!<! ! H$&()*I..#5$! !" L2!.-4R&I2)!>!*'%.(#1'!2-%!&-('-%!18%#.-%!4-(-!('-2#Q-(!I$!4()J'.&)!*'!-$82#%#%!J!6'%&#5$!*'! (#'%6)%W!'$&'$*#'$*)!UI'!$)!1-%&-!.)$!&'$'(!2)%!.)$.'4&)%!.2-()%W!%#$)!UI'!'%!.)$:'$#'$&'! 4-I&-(!()2'%W!-.&#:#*-*'%W!V#&)%!J!*).I,'$&-.#5$!4-(-!UI'!2-!('-2#Q-.#5$!*'2!4()J'.&)!*'!-$8g 2#%#%!J!6'%&#5$!*'!(#'%6)%!'%&;!1-F)!.)$&()2!'$!&)*)!,),'$&)D! !" L2!.-4R&I2)!B!-42#.-!2-!,'&)*)2)6R-!-2!.-%)!*'2!*'%-(()22)!*'!%#%&',-%!*'!#$O)(,-.#5$W!'$!'2! '$&'$*#,#'$&)!UI'!2)%!4()J'.&)%!*'!*'%-(()22)!*'!%#%&',-%!*'1'$!&'$'(!'$!.I'$&-!2)%!(#'%g 6)%! *'%*'! '2! 4(#,'(! ,),'$&)W! &-$&)! 2)%! (#'%6)%! -! UI'! '%&8$! 'M4I'%&)%W! .),)! 2)%! (#'%6)%! UI'!2-%!4()4#-%!-42#.-.#)$'%!#$&()*I.'$!'$!'2!%#%&',-D! 3),)!.),42','$&)W!'2!.-4R&I2)!A!*'%6(-$-!I$-!%'(#'!*'!-%4'.&)%!4(8.&#.)%W!*'(#:-*)%!*'!2-!'M4'g (#'$.#-!-.I,I2-*-!'$!'2!&#',4)!4-(-!2-!('-2#Q-.#5$!*'!I$!-$82#%#%!J!I$-!6'%&#5$!('-2,'$&'!'O'.&#g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odo de empleo T)%!2'.&)('%!$I':)%!'$!2-!,-&'(#-W!*'1'$!',4'Q-(!4)(!'2!.-4R&I2)!<D! ]#!J-!V-J!I$!.)$).#,#'$&)!*'!2)%!.)$.'4&)%W!'2!'F',42)!-JI*-!-!.'$&(-(!#*'-%!J!&'(,#$)2)6R-D! ]#!%'!:-!-!2-$Q-(!I$!4()J'.&)!*'!-$82#%#%!J!6'%&#5$!*'!(#'%6)%W!'2!.-4R&I2)!>!-JI*-!-!'%&(I.&I(-(2)!J! 42-$#O#.-(2)D!]#!'2!%#%&',-!*'!#$O)(,-.#5$!'%!%#,42'!J!('*I.#*)!)!1#'$!%#!%52)!%'!('UI#'('!I$-!4(#,'g (-!-4()M#,-.#5$W!4I'*'!1-%&-(!I$!42-$&'-,#'$&)!#$O)(,-2h!4'()!.I-$*)!'2!4()J'.&)!&),-!'$:'(6-g *I(-!.)$:#'$'!%'(!,'&5*#.)D! ]#!%'!'%&8!('-2#Q-$*)!I$!4()J'.&)!*'!-$82#%#%!J!6'%&#5$!*'!(#'%6)%W!'2!.-4R&I2)!A!-JI*-!-!.'$&(-(!2-! -.&#:#*-*!%#$!*#%&(-..#)$'%D! ]#!%'!:-!-!.)2-1)(-(!'$!I$!4()J'.&)!*'!*'%-(()22)!*'!I$!$I':)!%#%&',-!*'!#$O)(,-.#5$W!)!'$!I$! .#.2)!*'!,-$&'$#,#'$&)W!.)$:#'$'!('.I((#(!-2!.-4R&I2)!BD! ]#!%'!:-!-!&(-1-F-(!.)$!%#%&',-%!V),)2)6-*)%W!1#'$!4)(UI'!#$&'('%-!.),)!,'.-$#%,)!4-(-!'%4'g .#O#.-(!2)!UI'!%'!$'.'%#&-W!1#'$!4)(UI'!#$&'('%-!.),)!,'.-$#%,)!4-(-!'%4'.#O#.-(!2)!UI'!%'!&#'$'W! .)$:#'$'!('.I((#(!-2!-4;$*#.'!BD! L$!'2!42-$&'-,#'$&)!*'!'%&-%!6IR-%!%'!V-!%'6I#*)!I$!.(#&'(#)!j*'!,8M#,)%kW!('O2'F-$*)!&)*)!&#4)!*'! -.&#:)%W!&)*)!&#4)!*'!-%4'.&)%!*'!%'6I(#*-*W!&)*)!&#4)!*'!%#&I-.#)$'%W!'$!*'O#$#&#:-D!L$!2-!4(8.&#.-W! '2!I%I-(#)!4I'*'!'$.)$&(-(%'!-$&'!%#&I-.#)$'%!*)$*'!'2!-$82#%#%!'%!,8%!('%&(#$6#*)D!]#6I'$!-26Ig $)%!.-%)%!4(8.&#.)%!O('.I'$&'%[! !" %52)!%'!('UI#'('!I$!'%&I*#)!*'!2)%!O#.V'()%!-O'.&)%!-!2-!2'6#%2-.#5$!*'!*-&)%!*'!.-(8.&'(!4'(g %)$-2! !" %52)!%'!('UI#'('!I$!'%&I*#)!*'!2-%!6-(-$&R-%!*'!.)$O#*'$.#-2#*-*!*'!2-!#$O)(,-.#5$! !" %52)!%'!('UI#'('!I$!'%&I*#)!*'!2-!*#%4)$#1#2#*-*!*'!2)%!%'(:#.#)%!?&R4#.-,'$&'!4)(UI'!%'!1I%g .-!'2!*'%-(()22)!*'!I$!42-$!*'!.)$&#$6'$.#-C! !" '&.D! =!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%! ! 486#$-!@S!?*'!@ABC!
  • 11. "-6'(#&!:'(%#5$!<! ! H$&()*I..#5$! L%&-%!%#&I-.#)$'%W!O('.I'$&'%W!%'!('.)6'$!O)(,-2,'$&'!'$!2-%!&-('-%!*'!2-!-.&#:#*-*!+@D<!'!#$O)(g ,-2,'$&'!.),'$&-$*)!UI'!'%!.)$%&(I.&#:)!.'$&(-(%'!'$!I$!*),#$#)!('*I.#*)!'!#(!-,42#-$*)!'$!2-! ,'*#*-!*'!2-%!$'.'%#*-*'%W!-$&'%!UI'!-O()$&-(!2-!&)&-2#*-*D!! 1.4.2. El catálogo de elementos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g &'%!'UI#4)%D! 3-*-!%'..#5$!#$.2IJ'!I$-!$)&-.#5$!n"T!UI'!%'!',42'-(8!4-(-!4I12#.-(!('6I2-(,'$&'!2)%!'2','$g &)%!'$!I$!O)(,-&)!'%&8$*-(!.-4-Q!*'!%'(!4().'%-*)!-I&),8&#.-,'$&'!4)(!V'((-,#'$&-%!*'!-$82#%#%! J!6'%&#5$D! ]#! '2! 2'.&)(! I%-! I$-! V'((-,#'$&-! *'! -$82#%#%! J! 6'%&#5$! *'! (#'%6)%W! '%&'! .-&82)6)!%'(8!4-(&'!*'!2-! ,#%,-h!%#!'2!-$82#%#%!%'!('-2#Q-!,-$I-2,'$&'W!'%&'!.-&82)6)!4()4)(.#)$-!I$-!-,42#-!1-%'!*'!4-(&#g *-!4-(-!-:-$Q-(!(84#*-,'$&'!%#$!*#%&(-..#)$'%!$#!)2:#*)%D! 1.4.3. La guía de técnicas L$!2#1()!-4-(&'W!-4)(&-!2IQ!-*#.#)$-2!J!6IR-%!%)1('!-26I$-%!&;.$#.-%!UI'!%'!',42'-$!V-1#&I-2,'$&'! 4-(-!22':-(!-!.-1)!4()J'.&)%!*'!-$82#%#%!J!6'%&#5$!*'!(#'%6)%[! !" &;.$#.-%!'%4'.RO#.-%!4-(-!'2!-$82#%#%!*'!(#'%6)%! !" -$82#%#%!,'*#-$&'!&-12-%! !" -$82#%#%!-26)(R&,#.)! !" 8(1)2'%!*'!-&-UI'! !" &;.$#.-%!6'$'(-2'%! !" -$82#%#%!.)%&'g1'$'O#.#)! !" *#-6(-,-%!*'!O2IF)!*'!*-&)%! !" *#-6(-,-%!*'!4().'%)%! !" &;.$#.-%!6(8O#.-%! !" 42-$#O#.-.#5$!*'!4()J'.&)%! !" %'%#)$'%!*'!&(-1-F)[!'$&(':#%&-%W!('I$#)$'%!J!4('%'$&-.#)$'%! !" :-2)(-.#5$!'24V#! ]'! &(-&-! *'! I$-! 6IR-! *'! .)$%I2&-D! ]'60$!'2!2'.&)(!-:-$.'!4)(!2-!&-('-%!*'2!4()J'.&)W!%'!2'!('.)g ,'$*-(8!'2!I%)!*'!.#'(&-%!&;.$#.-%!'%4'.RO#.-%W!*'!2-%!UI'!'%&-!6IR-!1I%.-!%'(!I$-!#$&()*I..#5$W! -%R!.),)!4()4)(.#)$-(!('O'('$.#-%!4-(-!UI'!'2!2'.&)(!4()OI$*#.'!'$!2-%!&;.$#.-%!4('%'$&-*-%D! =!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%! ! 486#$-!@@!?*'!@ABC!
  • 12. "-6'(#&!:'(%#5$!<! ! H$&()*I..#5$! 1.5. Para los que han trabajado con Magerit v1.0 ]#!I%&'*!V-!&(-1-F-*)!.)$!"-6'(#&!:@DSW!&)*)%!2)%!.)$.'4&)%!2'!('%I2&-(8$!O-,#2#-('%W!-I$UI'!V-J! .#'(&-! ':)2I.#5$D! L$! 4-(&#.I2-(! ('.)$).'(8! 2)! UI'! %'! *'$),#$-1-! %I1,)*'2)! *'! '2','$&)%[! -.&#g :)%W!-,'$-Q-%W!:I2$'(-1#2#*-*'%W!#,4-.&)%W!(#'%6)%!J!%-2:-6I-(*-%D!L%&-!4-(&'!.)$.'4&I-2!V-!%#*)! ('O('$*-*-!4)(!'2!4-%)!*'2!&#',4)!J!%#6I'!%#'$*)!'2!'F'!-2('*'*)(!*'2!.I-2!%'!:'(&'1(-$!2-%!!O-%'%! OI$*-,'$&-2'%!*'!-$82#%#%!J!6'%&#5$D!]'!V-!.)(('6#*)!J!-,42#-*)!2)!UI'!%'!*'$),#$-1-!j%I1'%&-g *)%!*'!%'6I(#*-*k!*8$*)2'!'2!$I':)!$),1('!*'!j*#,'$%#)$'%k B!'!#$&()*I.#'$*)!$I':-%!:-(-%!*'! ,'*#(!2)!UI'!#$&'('%-!*'!2)%!-.&#:)%D!L2!%I1,)*'2)!*'!4().'%)%!-4-('.'!1-F)!'2!'4R6(-O'!*'!j'%g &(I.&I(-.#5$!*'2!4()J'.&)!*'!-$82#%#%!J!6'%&#5$!*'!(#'%6)%kD! ]#! 1#'$! "-6'(#&! :@DS! V-! ('%#%&#*)! 1#'$! '2! 4-%)! *'2! &#',4)! '$! 2)! .)$.'4&I-2W! $)! %'! 4I'*'!*'.#(!2)! ,#%,)!*'!2)%!*'&-22'%!&;.$#.)%!*'!2)%!%#%&',-%!*'!#$O)(,-.#5$!.)$!2)%!UI'!%'!&(-1-F-D!]'!#$&'$&-! I$-! 4I'%&-! -2! *R-h! 4'()! -$&'! &)*)! %'! #$&'$&-! *#O'('$.#-(! 2)! UI'! '%! '%'$.#-2! ?J!4'(,-$'$&'C!*'!2)! UI'!'%!.)JI$&I(-2!J!.-,1#-(8!.)$!'2!&#',4)D!L%&)!%'!&(-*I.'!'$!4-(-,'&(#Q-(!'2!,;&)*)!*'!&(-1-F)W! ('O'('$.#8$*)2)! -! .-&82)6)%! 'M&'($)%! *'! -,'$-Q-%! J! %-2:-6I-(*-%! UI'! %'! 4)*(8$! -.&I-2#Q-(W! -*-4&8$*)%'!-2!4-%)!*'2!&#',4)W!&-$&)!4)(!4()6('%)!&'.$)256#.)!.),)!4)(!4()6('%)!*'!2)%!%IF'&)%W! 4I'%!&-$!.#'(&)!'%!UI'!2)%!%#%&',-%!.-,1#-$!.),)!UI'!2)!V-.'$!2)%!%IF'&)%!-!%I!-2('*'*)(W!1I'g $)%!J!,-2)%D!oW!.I-$&)!,8%!;M#&)!&'$6-$!2)%!%#%&',-%W!,8%!I%I-(#)%!&'$*(8$!J!%#,I2&8$'-,'$&'W! ,8%!%IF'&)%!V-1(8!#$&'('%-*)%!'$!-1I%-(!*'!'22)%!)W!%#,42','$&'W!*'%&(I#(2)%D!+%R!4I'%W!UI'*'!'2! ,;&)*)W!-1#'(&)!*'!O)(,-!UI'!'%&-$*)!.2-()!UI;!%'!V-.'!J!.5,)W!%'!4I'*-$!-*-4&-(!2)%!*'&-22'%!-! .-*-!,),'$&)D! +! 'O'.&)%! 4(8.&#.)%W! '2! 48((-O)! -$&'(#)(! %'! &(-*I.'! '$! UI'! %'! V-! %'6('6-*)! '$! I$! 2#1()! -$'F)W! j3-&82)6)! *'! L2','$&)%kW! 2)%! &#4)%! *'! -.&#:)%W! 2-%! *#,'$%#)$'%! J! .(#&'(#)%! *'! :-2)(-.#5$W! '2! .-&82)6)!*'!-,'$-Q-%!J!'2!.-&82)6)!*'!%-2:-6I-(*-%W!*'!&-2!O)(,-!UI'!4I'*-$!':)2I.#)$-(D! L2!-4;$*#.'!G!'%!,8%!4('.#%)!'%&-12'.#'$*)!2-%!.)(('%4)$*'$.#-%!'$&('!2-!:'(%#5$!@DS!J!'%&-D! 1.6. Evaluación, certificación, auditoría y acreditación L2!-$82#%#%!*'!(#'%6)%!'%!I$-!4#'*(-!-$6I2-(!*'!2)%!4().'%)%!*'!':-2I-.#5$W!.'(&#O#.-.#5$W!-I*#&)(R-! J!-.('*#&-.#5$!UI'!O)(,-2#Q-$!2-!.)$O#-$Q-!UI'!,'('.'!I$!%#%&',-!*'!#$O)(,-.#5$D!-*)!UI'!$)! V-J!*)%!%#%&',-%!*'!#$O)(,-.#5$!#6I-2'%W!2-!':-2I-.#5$!*'!.-*-!%#%&',-!.)$.('&)!('UI#'('!-,)2g *-(%'!-!2)%!.),4)$'$&'%!UI'!2)!.)$%&#&IJ'$D!L$!-$82#%#%!*'!(#'%6)%!4()4)(.#)$-!I$-!:#%#5$!%#$6Ig 2-(! *'! .5,)! '%! .-*-! %#%&',-W! UI;! :-2)(! 4)%''W! -! UI;! -,'$-Q-%! '%&8! 'M4I'%&)! J! *'! UI;! %-2:-g 6I-(*-%!%'!V-!*)&-*)D!L%!4I'%!'2!-$82#%#%!*'!(#'%6)%!4-%)!)12#6-*)!4-(-!4)*'(!22':-(!-!.-1)!&)*-%! 2-%!&-('-%!,'$.#)$-*-%W!UI'!%'!('2-.#)$-$!%'60$!'2!%#6I#'$&'!'%UI',-[! ! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! ! B! #,'$%#5$W!'$!I$-!*'!2-%!-.'4.#)$'%!*'2!#..#)$-(#)!*'!2-!T'$6I-!L%4-c)2-W!*R.'%'!UI'!'%!j3-*-!I$-! *'!2-%!,-6$#&I*'%!*'!I$!.)$FI$&)!UI'!%#(:'$!4-(-!*'O#$#(!I$!O'$5,'$)D!/)(!'F',42)W!'2!'%4-.#)!*'!.I-&()! *#,'$%#)$'%!*'!2-!&')(R-!*'!2-!('2-&#:#*-*Dk! =!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%! ! 486#$-!@<!?*'!@ABC!
  • 13. "-6'(#&!:'(%#5$!<! ! H$&()*I..#5$! L$!'%&-!%'..#5$!%'!V-.'!I$-!4('%'$&-.#5$!.)$.'4&I-2!*'!2-%!-.&#:#*-*'%!.#&-*-%D!L2!2'.&)(!'$.)$g &(-(8!'$!'2!-4;$*#.'!B!I$!&(-&-,#'$&)!'%4'.RO#.)!*'!2)%!,-(.)%!$)(,-&#:)%!('2-&#:)%!-!%#%&',-%!*'! 6'%&#5$!J!4()*I.&)%!*'!%'6I(#*-*D! Evaluación L%! .-*-! :'Q! ,8%! O('.I'$&'! 2-! ':-2I-.#5$! *'! 2-! %'6I(#*-*! *'! 2)%! %#%&',-%! *'! #$O)(,-.#5$W! &-$&)! #$&'($-,'$&'! .),)! 4-(&'! *'! 2)%! 4().'%)%! *'! 6'%&#5$W! .),)! 4)(! ,'*#)! *'! ':-2I-*)('%! #$*'4'$g *#'$&'%!'M&'($)%D!T-%!':-2I-.#)$'%!4'(,#&'$!,'*#(!'2!6(-*)!*'!.)$O#-$Q-!UI'!,'('.'!)!#$%4#(-!I$! %#%&',-!*'!#$O)(,-.#5$D!! Certificación T-!':-2I-.#5$!4I'*'!22':-(!-!I$-!.'(&#O#.-.#5$!)!('6#%&()!*'!2-!%'6I(#*-*!*'2!%#%&',-D!L$!2-!4(8.&#.-! %'!.'(&#O#.-$!4()*I.&)%!J!%'!.'(&#O#.-$!%#%&',-%!*'!6'%&#5$!*'!2-!%'6I(#*-*D!T-!.'(&#O#.-.#5$!*'!4()g *I.&)%!'%W!*'!-26I$-!O)(,-W!#,4'(%)$-2[!j'%&)!&#'$'!'%&-%!.-(-.&'(R%&#.-%!&;.$#.-%kD!]#$!',1-(6)W! 2-!.'(&#O#.-.#5$!*'!%#%&',-%!*'!6'%&#5$!&#'$'!UI'!:'(!.)$!'2!j.),4)$'$&'!VI,-$)k!*'!2-%!)(6-$#Q-g .#)$'%!1I%.-$*)!'2!-$82#%#%!*'!.5,)!%'!'M42)&-$!2)%!%#%&',-% AD!! 3'(&#O#.-(! '%! -%'6I(-(! ('%4)$%-12','$&'! J! 4)(! '%.(#&)! I$! .),4)(&-,#'$&)D! T)! UI'! %'! .'(&#O#.-W! 4()*I.&)!)!%#%&',-W!%'!%),'&'!-!I$-!%'(#'!*'!':-2I-.#)$'%!)(#'$&-*-%!4)(!I$!)1F'&#:)!X4-(-!UI;! 2)!UI#'('Y GD!9$!.'(&#O#.-*)!*#.'!UI'!I$!%#%&',-!'%!.-4-Q!*'!4()&'6'(!I$)%!*-&)%!*'!I$-%!-,'$-g Q-%! .)$! I$-! .#'(&-! .-2#*-*! ?.-4-.#*-*! *'! 4()&'..#5$CD! o! 2)! *#.'! '$! 1-%'! -! UI'! V-! )1%'(:-*)! 2-! 'M#%&'$.#-!J!'2!OI$.#)$-,#'$&)!*'!I$-!%'(#'!*'!%-2:-6I-(*-%D!L%!*'.#(!UI'!*'&(8%!*'!I$!.'(&#O#.-*)! $)!V-J!%#$)!2)%!.)$.'4&)%!*'!I$!-$82#%#%!*'!(#'%6)%D! +$&'%!*'!4().'*'(!-!2-!.'(&#O#.-.#5$W!*'1'!V-1'(%'!('-2#Q-*)!I$!-$82#%#%!*'!(#'%6)%!-!O#$!*'!.)$)g .'(!2)%!(#'%6)%!J!*'!.)$&()2-(2)%!,'*#-$&'!2-!-*)4.#5$!*'!2)%!.)$&()2'%!-*'.I-*)%W!-*',8%W!%'(8! I$!4I$&)!*'!.)$&()2!*'!2-!6'%&#5$!*'2!4()*I.&)!)!%#%&',-D! Acreditación +26I$-%! .'(&#O#.-.#)$'%!&#'$'$!.),)!)1F'&#:)!2-!-.('*#&-.#5$!*'2!4()*I.&)!)!%#%&',-D!T-!-.('*#&-g .#5$!'%!I$!4().'%)!'%4'.RO#.)!.IJ)!)1F'&#:)!'%!2'6#&#,-(!-2!%#%&',-!4-(-!O)(,-(!4-(&'!*'!%#%&',-%! ,8%!-,42#)%D!]'!4I'*'!:'(!.),)!I$-!.'(&#O#.-.#5$!4-(-!I$!4()45%#&)!'%4'.RO#.)D! Auditorías +I$UI'!$)!%'-!2)!,#%,)W!$)!'%&8$!,IJ!2'F)%!*'!'%&'!,I$*)!2-%!-I*#&)(R-%W!#$&'($-%!)!'M&'($-%W!-! 2-%!UI'!%'!%),'&'$!2)%!%#%&',-%!*'!#$O)(,-.#5$! !" I$-%!:'.'%!('UI'(#*-%!4)(!2'J!4-(-!4)*'(!)4'(-(!'$!I$!.#'(&)!%'.&)(W!! !" )&(-%!:'.'%!('UI'(#*-%!4)(!2-!4()4#-!#('..#5$!*'!2-!E(6-$#Q-.#5$W!! !" )&(-%!:'.'%!('UI'(#*-%!4)(!'$&#*-*'%!.)2-1)(-*)(-%!UI'!:'$!%I!4()4#)!$#:'2!*'!(#'%6)!2#6-g *)!-2!$I'%&()D!! 9$-!-I*#&)(R-!4I'*'!%'(:#(%'!*'!I$!-$82#%#%!*'!(#'%6)%!UI'!2'!4'(,#&-!?@C!%-1'(!UI;!V-J!'$!FI'6)W! ?<C!%-1'(!-!UI;!'%&8!'M4I'%&)!'2!%#%&',-!J!?>C!:-2)(-(!2-!'O#.-.#-!J!'O#.#'$.#-!*'!2-%!%-2:-6I-(*-%D! e('.I'$&','$&'W!2)%!-I*#&)('%!4-(&'$!*'!I$!-$82#%#%!*'!(#'%6)%W!#,42R.#&)!)!'M42R.#&)W!UI'W!)!1#'$!! ('-2#Q-$!'22)%!,#%,)%W!)!1#'$!2)!-I*#&-$D!]#',4('!'$!2-!4(#,'(-!O-%'!*'!2-!-I*#&)(R-W!4I'%!'%!*#OR.#2! )4#$-(!*'!2)!UI'!$)!%'!.)$).'D!+!4-(&#(!*'2!-$82#%#%!*'!(#'%6)%!%'!4I'*'!-$-2#Q-(!'2!%#%&',-!'!#$g O)(,-(!-!2-!6'('$.#-!*'!%#!'2!%#%&',-!'%&8!1-F)!.)$&()2h!'%!*'.#(W!%#!2-%!,'*#*-%!*'!%'6I(#*-*!-*)4g ! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! A! i-J! :'VR.I2)%! .)$! -2&-%! .-2#O#.-.#)$'%! &;.$#.-%! J! )&()%! ,8%! VI,#2*'%D! T)! ,#%,)! UI'! V-J! .)$*I.&)('%! UI'!%)$!:'(*-*'()%!4()O'%#)$-2'%!J!)&()%!*'!2)%!UI'!$I$.-!$)%!'M42#.-(',)%!.5,)!'%!UI'!'%&8$!.'(&#O#g .-*)%!.),)!j-4&)%!4-(-!'2!,-$'F)!*'!:'VR.I2)%kD!!T)!#*'-2!'%!4)$'(!I$!6(-$!.).V'!'$!,-$)%!*'!I$!6(-$! .)$*I.&)(D! '! -VR! 4-(-! -1-F)W! &'$',)%! I$-! 6(-$! :-(#'*-*! *'! %#&I-.#)$'%! *'! ,'$)(! .)$O#-$Q-[! ,-J)(! (#'%6)!*'!UI'!-26)!:-J-!,-2D! G! o!-%R!&'$',)%!%#%&',-%!-4&)%!4-(-!j.)$%I,)!VI,-$)k!)!jI&#2#Q-.#5$!'$!.)$*#.#)$'%!&;(,#.-%!'M&(',-%kD! =!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%! ! 486#$-!@>!?*'!@ABC!
  • 14. "-6'(#&!:'(%#5$!<! ! H$&()*I..#5$! &-*-%!'%&8$!FI%&#O#.-*-%W!#,42-$&-*-%!J!,)$#&)(#Q-*-%W!*'!O)(,-!UI'!%'!4I'*'!.)$O#-(!'$!'2!%#%&'g ,-!*'!#$*#.-*)('%!*'!UI'!*#%4)$'!2-!6'('$.#-!4-(-!6'%&#)$-(!2-!%'6I(#*-*!*'!2)%!%#%&',-%D! T-!.)$.2I%#5$!*'!2-!-I*#&)(R-!'%!I$!#$O)(,'!*'!#$%IO#.#'$.#-%!*'&'.&-*-%W!UI'!$)!%)$!%#$)!#$.)V'g ('$.#-%!'$&('!2-%!$'.'%#*-*'%!#*'$&#O#.-*-%!'$!'2!-$82#%#%!*'!(#'%6)%!J!2-!('-2#*-*!*'&'.&-*-!*I(-$g &'!2-!#$%4'..#5$!*'2!%#%&',-!'$!)4'(-.#5$D!! L2!#$O)(,'!*'!-I*#&)(R-!*'1'(8!*#.&-,#$-(!%)1('!2-!-*'.I-.#5$!*'!2-%!,'*#*-%!J!.)$&()2'%!-2! 4('%'$&'! Z'62-,'$&)W! #*'$&#O#.-(! %I%! *'O#.#'$.#-%! J! 4()4)$'(! 2-%! ,'*#*-%! .)(('.&)(-%! )! .),42','$&-(#-%!$'.'%-(#-%D!'1'(8W!#6I-2,'$&'W!#$.2I#(!2)%!*-&)%W!V'.V)%!J!)1%'(:-.#)$'%! '$!UI'!%'!1-%'$!2)%!*#.&8,'$'%!-2.-$Q-*)%!J!('.),'$*-.#)$'%!4()4I'%&-%D!pZ!PPBd@PPPW! -(&R.I2)!@KD<q! L$!'2!.-%)!*'!2-!+*,#$#%&(-.#5$!4012#.-W!'M#%&'$!-26I$)%!('O'('$&'%!OI$*-,'$&-2'%!('%4'.&)!*'!2)%! .I-2'%!%'!4I'*'!J!%'!*'1'!('-2#Q-(!-I*#&)(R-%[! !" Z'-2!'.('&)!PPBd@PPPW!*'!@@!*'!FI$#)W!4)(!'2!UI'!%'!-4(I'1-!'2!Z'62-,'$&)!*'!,'*#*-%!*'! %'6I(#*-*!*'!2)%!O#.V'()%!-I&),-&#Q-*)%!UI'!.)$&'$6-$!*-&)%!*'!.-(8.&'(!4'(%)$-2D! !" j3(#&'(#)%!*'!%'6I(#*-*W!$)(,-2#Q-.#5$!J!.)$%'(:-.#5$!*'!2-%!-42#.-.#)$'%!I&#2#Q-*-%!4-(-!'2! 'F'(.#.#)!*'!4)&'%&-*'%kW!"+/W!<SSB! T-%!-I*#&)(R-%!*'1'$!('4'&#(%'!('6I2-(,'$&'!&-$&)!4-(-!%'6I#(!2-!':)2I.#5$!*'2!-$82#%#%!*'!(#'%6)%! ?UI'! %'! *'1'! -.&I-2#Q-(! ('6I2-(,'$&'C! .),)! 4-(-! %'6I#(! '2! *'%-(()22)! *'2! 42-$! *'! %'6I(#*-*! *'g &'(,#$-*)!4)(!2-%!-.&#:#*-*'%!*'!6'%&#5$!*'!(#'%6)%D! 1.7. ¿Cuándo procede analizar y gestionar los riesgos? Z'-2#Q-(!I$!-$82#%#%!*'!(#'%6)%!'%!2-1)(#)%)!J!.)%&)%)D!T':-$&-(!I$!,-4-!*'!-.&#:)%!J!:-2)(-(2)%! ('UI#'('!2-!.)2-1)(-.#5$!*'!,I.V)%!4'(O#2'%!*'$&()!*'!2-!E(6-$#Q-.#5$W!*'%*'!2)%!$#:'2'%!*'!6'g ('$.#-!V-%&-!2)%!&;.$#.)%D!o!$)!%)2)!'%!UI'!V-J-!UI'!#$:)2I.(-(!-!,I.V-%!4'(%)$-%W!%#$)!UI'!V-J! UI'! 2)6(-(! I$-! I$#O)(,#*-*! *'! .(#&'(#)! '$&('! &)*)%! 4I'%W! %#! #,4)(&-$&'! '%! .I-$&#O#.-(! 2)%! (#'%6)%W! ,8%!#,4)(&-$&'!-0$!'%!('2-&#:#Q-(2)%D!o!'%&)!'%!-%R!4)(UI'!&R4#.-,'$&'!'$!I$!-$82#%#%!*'!(#'%6)%! -4-('.'$!,I2&#&I*!*'!*-&)%D!T-!0$#.-!O)(,-!*'!-O()$&-(!2-!.),42'F#*-*!'%!.'$&(-(%'!'$!2)!,8%!#,g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g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c)!*'2!%'(:#.#)W!'$!2-! '2'..#5$!*'!.),4)$'$&'%W!'$!'2!*'%-(()22)!*'!2-%!-42#.-.#)$'%!J!'$!2)%!,-$I-2'%!*'!I%I-(#)D!`)*)! 2)! UI'! %'-! .)(('6#(! (#'%6)%! #,4(':#%&)%! '%! .)%&)%)! '$! &#',4)! 4()4#)! J! -F'$)W! 2)! UI'! 4I'*'! #(! '$! *'&(#,'$&)!*'!2-!#,-6'$!4('%&-*-!4)(!2-!E(6-$#Q-.#5$!J!4I'*'!%I4)$'(W!'$!02&#,)!'M&(',)W!2-!4;(g *#*-!*'!.)$O#-$Q-!'$!%I!.-4-.#*-*D!]#',4('!%'!V-!*#.V)!UI'!'%!,'F)(!4(':'$#(!UI'!.I(-(!J!-UIR! %'!-42#.-[!$)!'%4'('!-!UI'!I$!%'(:#.#)!V-6-!-6I-h!V-J!UI'!4(':'(!J!'%&-(!4(':'$#*)D! Por precepto legal L2! -$82#%#%! *'! (#'%6)%! 4I'*'! :'$#(! ('UI'(#*)! 4)(! 4('.'4&)! 2'6-2D! `-2! '%!'2!.-%)!*'2!Z'-2!'.('&)! <G>d@PPGW!*'!@G!*'!e'1('()W!4)(!'2!UI'!%'!('6I2-!2-!I&#2#Q-.#5$!*'!&;.$#.-%!'2'.&(5$#.-%W!#$O)(,8&#g .-%!J!&'2',8&#.-%!4)(!2-!+*,#$#%&(-.#5$!^'$'(-2!*'2!L%&-*)D!L$!%I!-(&R.I2)!B!?^-(-$&R-%!6'$'(-2'%! =!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%! ! 486#$-!@B!?*'!@ABC!
  • 15. "-6'(#&!:'(%#5$!<! ! H$&()*I..#5$! *'!2-!I&#2#Q-.#5$!*'!%)4)(&'%W!,'*#)%!J!-42#.-.#)$'%!'2'.&(5$#.-%W!#$O)(,8&#.-%!J!&'2',8&#.-%C!*#.'! -%R[! <D!3I-$*)!%'!I&#2#.'$!2)%!%)4)(&'%W!,'*#)%!J!-42#.-.#)$'%!('O'(#*)%!'$!'2!-4-(&-*)!-$&'(#)(W!%'! -*)4&-(8$!2-%!,'*#*-%!&;.$#.-%!J!*'!)(6-$#Q-.#5$!$'.'%-(#-%!UI'!-%'6I('$!2-!-I&'$&#.#*-*W! .)$O#*'$.#-2#*-*W! #$&'6(#*-*W! *#%4)$#1#2#*-*! J! .)$%'(:-.#5$! *'! 2-! #$O)(,-.#5$D! #.V-%! ,'*#g *-%!*'!%'6I(#*-*!*'1'(8$!&'$'(!'$!.I'$&-!'2!'%&-*)!*'!2-!&'.$)2)6R-!J!%'(!4()4)(.#)$-*-%!-! 2-!$-&I(-2'Q-!*'!2)%!*-&)%!J!*'!2)%!&(-&-,#'$&)%!J!-!los riesgos a los que estén expuestos KD! '!O)(,-!%#,#2-(W!'$!2-!T'J!E(68$#.-!@Ad@PPPW!*'!@>!*'!*#.#',1('W!*'!4()&'..#5$!*'!*-&)%!*'!.-g (8.&'(!4'(%)$-2W!'$!%I!-(&R.I2)!P!?]'6I(#*-*!*'!2)%!*-&)%C!*#.'!-%R[! @D!L2!('%4)$%-12'!*'2!O#.V'()W!JW!'$!%I!.-%)W!'2!'$.-(6-*)!*'2!&(-&-,#'$&)W!*'1'(8$!-*)4&-(!2-%! ,'*#*-%!*'!R$*)2'!&;.$#.-!J!)(6-$#Q-&#:-%!$'.'%-(#-%!UI'!6-(-$&#.'$!2-!%'6I(#*-*!*'!2)%!*-g &)%!*'!.-(8.&'(!4'(%)$-2!J!':#&'$!%I!-2&'(-.#5$W!4;(*#*-W!&(-&-,#'$&)!)!-..'%)!$)!-I&)(#Q-*)W! V-1#*-! .I'$&-! *'2! '%&-*)! *'! 2-! &'.$)2)6R-W! 2-! $-&I(-2'Q-! *'! 2)%! *-&)%! -2,-.'$-*)%! J! los riesgos a que están expuestos,!J-!4():'$6-$!*'!2-!-..#5$!VI,-$-!)!*'2!,'*#)!OR%#.)!)!$-&Ig (-2D! `'M&)!UI'!%'!('.)6'!*'!$I':)!'$!'2!4('8,1I2)!-2!ZL+T!L3ZL`E!PPBd@PPPW!*'!@@!*'!FI$#)W!4)(! '2! UI'! %'! -4(I'1-! '2! Z'62-,'$&)! *'! ,'*#*-%! *'! %'6I(#*-*! *'! 2)%! O#.V'()%! -I&),-&#Q-*)%! UI'! .)$&'$6-$!*-&)%!*'!.-(8.&'(!4'(%)$-2D!L$!'%&'!*'.('&)!%'!('.)6'!2-!)12#6-.#5$!*'!'2-1)(-(!I$!*)g .I,'$&)!*'!%'6I(#*-*! @D!L2!('%4)$%-12'!*'2!O#.V'()!'2-1)(-(8!'!#,42-$&-(8!2-!$)(,-&#:-!*'!%'6I(#*-*!,'*#-$&'!I$!*)g .I,'$&)!*'!)12#6-*)!.I,42#,#'$&)!4-(-!'2!4'(%)$-2!.)$!-..'%)!-!2)%!*-&)%!-I&),-&#Q-*)%! *'!.-(8.&'(!4'(%)$-2!J!-!2)%!%#%&',-%!*'!#$O)(,-.#5$D!! #OR.#2,'$&'!%'!4I'*'!*'%-(()22-(!*#.V)!*).I,'$&)!%#$!I$!-$82#%#%!4(':#)!*'!2)%!(#'%6)%!%)1('!2)%! *-&)%W!-$82#%#%!UI'!$)%!22':'!-!*'&'(,#$-(!2-%!,'*#*-%!*'!%'6I(#*-*!4'(&#$'$&'%D! Certificación y acreditación ]#!'2!%#%&',-!-%4#(-!-!I$-!.'(&#O#.-.#5$W!'2!-$82#%#%!*'!(#'%6)%!'%!I$!('UI#%#&)!4(':#)!UI'!'M#6#(8!'2! ':-2I-*)(D!L%!2-!OI'$&'!*'!#$O)(,-.#5$!4-(-!*'&'(,#$-(!2-!('2-.#5$!*'!.)$&()2'%!4'(&#$'$&'%!4-(-!'2! %#%&',-!J!UI'!4)(!&-$&)!*'1'$!%'(!#$%4'..#)$-*)%D!_;-%'!'2!-4;$*#.'!BD@!%)1('!.'(&#O#.-.#5$!*'! %#%&',-%!*'!6'%&#5$!*'!2-!%'6I(#*-*!*'!2-!#$O)(,-.#5$!?]^]HCD! L2!-$82#%#%!*'!(#'%6)%!'%!-%R!,#%,)!I$!('UI#%#&)!'M#6#*)!'$!2)%!4().'%)%!*'!-.('*#&-.#5$ N!*'!%#%&'g ,-%D!L%&)%!4().'%)%!%)$!$'.'%-(#)%!.I-$*)!%'!:-!-!,-$'F-(!'$!'2!%#%&',-!#$O)(,-.#5$!.2-%#O#.-*-! $-.#)$-2W!9LW!E`+7!)!*'!)&()%!-.I'(*)%!#$&'($-.#)$-2'%D!L2!4(#,'(!4-%)!*'2!4().'%)!'%!2-!('-2#Q-g .#5$!*'2!-$82#%#%!*'!(#'%6)%!UI'!#*'$&#O#UI'!-,'$-Q-%!J!%-2:-6I-(*-%!J!6'%&#)$'!%-&#%O-.&)(#-,'$g &'!2)%!(#'%6)%!*'2!%#%&',-D!! /)(!02&#,)W!.-1'!,'$.#)$-(!'2!',42')!*'!4'(O#2'%!*'!4()&'..#5$!.),)!,'.-$#%,)!*'!.)$&(-&-.#5$D! T)%!4'(O#2'%!*'!4()&'..#5$!?H]EdHL3g@ABSNC!$-.'$!.)$!2-!*)12'!,#%#5$!*'!4)*'(!'%4'.#O#.-(!-!4(#)(#!! 2)%!('UI#%#&)%!*'!%'6I(#*-*!*'!I$!%#%&',-!?4-(-!%I!-*UI#%#.#5$!)!*'%-(()22)C!J!4)*'(!%'(:#(!*'!('O'g ('$.#-!#$&'($-.#)$-2!*'2!%#6$#O#.-*)!*'!I$-!.'(&#O#.-.#5$D!L$!I$)!I!)&()!.-%)W!'%&-12'.'!2-!j:-(-!*'! ,'*#(k!('%4'.&)!*'!2-!UI'!%'!.-2#O#.-(8!2-!#*)$'#*-*!*'!2-!%'6I(#*-*!*'2!%#%&',-D!_;-%'!'2!-4;$*#.'! BD<!%)1('!.(#&'(#)%!.),I$'%!*'!':-2I-.#5$!?33CD! En conclusión /().'*'!-$-2#Q-(!J!6'%&#)$-(!2)%!(#'%6)%!.I-$*)!*#('.&-!)!#$*#('.&-,'$&'!2)!'%&-12'Q.-!I$!4('.'4g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
  • 16. "-6'(#&!:'(%#5$!<! ! Z'-2#Q-.#5$!*'2!-$82#%#%!J!6'%&#5$! 2. Realización del análisis y de la gestión L%&'!.-4R&I2)!'M4)$'!*'!O)(,-!.)$.'4&I-2!'$!UI;!.)$%#%&'!'%&)!*'2!-$82#%#%!*'!(#'%6)%!J!-UI'22)! *'!%I!6'%&#5$W!UI;!%'!1I%.-!'$!.-*-!,),'$&)!J!UI;!.)$.2I%#)$'%!%'!*'(#:-$D!! i-J!*)%!6(-$*'%!&-('-%!-!('-2#Q-([! I. análisis de riesgos, UI'!4'(,#&'!*'&'(,#$-(!UI;!&#'$'!2-!E(6-$#Q-.#5$!J!'%&#,-(!2)!UI'!4)*(R-!4-%-(D! L2','$&)%[! @D! -.&#:)%W!UI'!$)!%)$!%#$)!2)%!'2','$&)%!*'2!%#%&',-!*'!#$O)(,-.#5$!?)!'%&('.V-,'$&'!('2-.#)g $-*)%!.)$!'%&'C!UI'!-4)(&-$!:-2)(!-!2-!E(6-$#Q-.#5$! <D! -,'$-Q-%W!UI'!$)!%)$!%#$)!.)%-%!UI'!2'%!4I'*'$!4-%-(!-!2)%!-.&#:)%!.-I%-$*)!I$!4'(FI#.#)! -!2-!E(6-$#Q-.#5$! >D! %-2:-6I-(*-%!?)!.)$&(-!,'*#*-%CW!UI'!$)!%)$!%#$)!'2','$&)%!*'!*'O'$%-!*'%42'6-*)%!4-(-! UI'!-UI'22-%!-,'$-Q-%!$)!.-I%'$!p&-$&)q!*-c)D! 3)$!'%&)%!'2','$&)%!%'!4I'*'!'%&#,-([! @D! '2!#,4-.&)[!2)!UI'!4)*(R-!4-%-(! <D! '2!(#'%6)[!2)!UI'!4()1-12','$&'!4-%'! L2!-$82#%#%!*'!(#'%6)%!4'(,#&'!-$-2#Q-(!'%&)%!'2','$&)%!*'!O)(,-!,'&5*#.-!4-(-!22'6-(!-!.)$.2I%#)g $'%!.)$!OI$*-,'$&)D! II. gestión de riesgos, UI'! 4'(,#&'! )(6-$#Q-(! 2-! *'O'$%-! .)$.#'$QI*-! J! 4(I*'$&'W! *'O'$*#'$*)! 4-(-! UI'! $)! 4-%'! $-*-!,-2)!J!-2!&#',4)!'%&-$*)!4('4-(-*)%!4-(-!-&-F-(!2-%!','(6'$.#-%W!%)1(':#:#(!-!2)%!#$.#g *'$&'%!J!%'6I#(!)4'(-$*)!'$!2-%!,'F)('%!.)$*#.#)$'%h!.),)!$-*-!'%!4'(O'.&)W!%'!*#.'!UI'!'2! (#'%6)!%'!('*I.'!-!I$!$#:'2!('%#*I-2!UI'!2-!#('..#5$!-%I,'D! H$O)(,-2,'$&'W!%'!4I'*'!*'.#(!UI'!2-!6'%&#5$!*'!2-!%'6I(#*-*!*'!I$!%#%&',-!*'!#$O)(,-.#5$!'%!2-! 6'%&#5$!*'!%I%!(#'%6)%!J!UI'!'2!-$82#%#%!4'(,#&'!(-.#)$-2#Q-(!*#.V-!6'%&#5$D! 2.1. Análisis de Riesgos L2!-$82#%#%!*'!(#'%6)%!'%!I$-!-4()M#,-.#5$!,'&5*#.-!4-(-!*'&'(,#$-(!'2!(#'%6)!%#6I#'$*)!I$)%!4-g %)%!4-I&-*)%[! @D! *'&'(,#$-(!2)%!-.&#:)%!('2':-$&'%!4-(-!2-!E(6-$#Q-.#5$W!%I!#$&'(('2-.#5$!J!%I!:-2)(W!'$!'2!%'$g &#*)!*'!UI;!4'(FI#.#)!?.)%&'C!%I4)$*(R-!%I!*'6(-*-.#5$! <D! *'&'(,#$-(!-!UI;!-,'$-Q-%!'%&8$!'M4I'%&)%!-UI'22)%!-.&#:)%! >D! *'&'(,#$-(!UI;!%-2:-6I-(*-%!V-J!*#%4I'%&-%!J!.I8$!'O#.-.'%!%)$!O('$&'!-2!(#'%6)! BD! '%&#,-(!'2!#,4-.&)W!*'O#$#*)!.),)!'2!*-c)!%)1('!'2!-.&#:)!*'(#:-*)!*'!2-!,-&'(#-2#Q-.#5$!*'!2-! -,'$-Q-! AD! '%&#,-(!'2!(#'%6)W!*'O#$#*)!.),)!'2!#,4-.&)!4)$*'(-*)!.)$!2-!&-%-!*'!).I(('$.#-!?)!'M4'.&-g &#:-!*'!,-&'(#-2#Q-.#5$C!*'!2-!-,'$-Q-! 3)$!'2!)1F'&)!*'!)(6-$#Q-(!2-!4('%'$&-.#5$W!%'!&(-&-$!4(#,'()!2)%!4-%)%!@W!<W!B!J!AW!)1:#-$*)!'2!4-g %)! >W! *'! O)(,-! UI'! 2-%! '%&#,-.#)$'%! *'! #,4-.&)! J! (#'%6)! %'-$! j4)&'$.#-2'%k[! .-%)! *'! UI'! $)! VI1#'(-!%-2:-6I-(*-!-26I$-!*'%42'6-*-D!9$-!:'Q!)1&'$#*)!'%&'!'%.'$-(#)!&'5(#.)W!%'!#$.)(4)(-$! 2-%!%-2:-6I-(*-%!*'2!4-%)!>W!*'(#:-$*)!'%&#,-.#)$'%!('-2#%&-%!*'!#,4-.&)!J!(#'%6)D! =!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%! ! 486#$-!@G!?*'!@ABC!
  • 17. "-6'(#&!:'(%#5$!<! ! Z'-2#Q-.#5$!*'2!-$82#%#%!J!6'%&#5$! T-!%#6I#'$&'!O#6I(-!('.)6'!'%&'!4(#,'(!('.)((#*)W!.IJ)%!4-%)%!%'!*'&-22-$!'$!2-%!%#6I#'$&'%!%'..#)g $'% P[! '%&8$!'M4I'%&)%!- activos activos H$&'('%-$!4)(!%I amenazas amenazas valor valor .-I%-$!I$-!.#'(&- degradación degradación impacto impacto .)$!I$-!.#'(&- frecuencia frecuencia riesgo riesgo ! 2.1.1. Paso 1: Activos ]'!*'$),#$-$!-.&#:)%!2)%!recursos del sistema de información o relacionados con éste, ne- cesarios para que la Organización funcione correctamente y alcance los objetivos propues- tos por su dirección. L2!-.&#:)!'%'$.#-2!'%!2-!#$O)(,-.#5$!UI'!,-$'F-!'2!%#%&',-h!)!%'-!2)%!*-&)%D!o!-2('*'*)(!*'!'%&)%! *-&)%!%'!4I'*'$!#*'$&#O#.-(!)&()%!-.&#:)%!('2':-$&'%[! Los servicios!UI'!%'!4I'*'$!4('%&-(!6(-.#-%!-!-UI'22)%!*-&)%W!J!2)%!%'(:#.#)%!UI'!%'!$'.'%#&-$! 4-(-!4)*'(!6'%&#)$-(!*#.V)%!*-&)%D! Las aplicaciones informáticas (software) UI'!4'(,#&'$!,-$'F-(!2)%!*-&)%D! Los equipos informáticos (hardware) J! UI'! 4'(,#&'$! V)%4'*-(! *-&)%W! -42#.-.#)$'%! J! %'(:#g .#)%D! Los soportes de información UI'!%)$!*#%4)%#&#:)%!*'!-2,-.'$-,#'$&)!*'!*-&)%D! El equipamiento auxiliar UI'!.),42','$&-!'2!,-&'(#-2!#$O)(,8&#.)D! Las redes de comunicaciones!UI'!4'(,#&'$!#$&'(.-,1#-(!*-&)%D! Las instalaciones UI'!-.)6'$!'UI#4)%!#$O)(,8&#.)%!J!*'!.),I$#.-.#)$'%D! Las personas UI'!'M42)&-$!I!)4'(-$!&)*)%!2)%!'2','$&)%!-$&'(#)(,'$&'!.#&-*)%D! Tipos de activos 7)!&)*)%!2)%!-.&#:)%!%)$!*'!2-!,#%,-!'%4'.#'D!'4'$*#'$*)!*'2!&#4)!*'!-.&#:)W!2-%!-,'$-Q-%!J!2-%! %-2:-6I-(*-%!%)$!*#O'('$&'% @SD!L2!.-4R&I2)!<!*'2!m3-&82)6)!*'!L2','$&)%m!4('%'$&-!I$-!('2-.#5$!*'! &#4)%!*'!-.&#:)%D! ]#! '2! %#%&',-! ,-$'F-! *-&)%! *'! .-(8.&'(! 4'(%)$-2W! '%&)%! %I'2'$! %'(! #,4)(&-$&'%! 4)(! %R! ,#%,)%! J! ('UI'(#(! I$-! %'(#'! *'! %-2:-6I-(*-%! O('.I'$&','$&'! ('6I2-*-%! 4)(! 2'JD! L$! '%&)%! -.&#:)%! #$&'('%-! ! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! P! T)%!2'.&)('%!O-,#2#-(#Q-*)%!.)$!"-6'(#&!:@DSW!*'&'.&-(8$!2-!-I%'$.#-!*'!2-!:)Q!j:I2$'(-1#2#*-*kD!L2!.)$.'4g &)!*'!:I2$'(-1#2#*-*!?4)&'$.#-2#*-*!)!4)%#1#2#*-*!*'!).I(('$.#-!*'!I$-!-,'$-Q-!%)1('!I$!-.&#:)C!%'!#$g .)(4)(-!4)(!,'*#)!*'!2-%!,;&(#.-%!*'!*'6(-*-.#5$!*'2!-.&#:)!J!O('.I'$.#-!*'!).I(('$.#-!*'!2-!-,'$-Q-D! @S!7)!%'!-&-.-!$#!%'!*'O#'$*'!*'!2-!,#%,-!,-$'(-!I$!%'(:#.#)!&'2',8&#.)!UI'!I$!2).-2!*'!&(-1-F)D! =!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%! ! 486#$-!@K!?*'!@ABC!
  • 18. "-6'(#&!:'(%#5$!<! ! Z'-2#Q-.#5$!*'2!-$82#%#%!J!6'%&#5$! *'&'(,#$-(!UI;!&(-&-,#'$&)!V-J!UI'!#,4)$'(2'% @@D!L2!V'.V)!*'!UI'!I$!*-&)!%'-!*'!.-(8.&'(!4'(%)g $-2!#,4-.&-!%)1('!&)*)%!2)%!-.&#:)%!#$:)2I.(-*)%!'$!%I!&(-&-,#'$&)!J!.I%&)*#-D! +26)! %#,#2-(! ).I(('! .)$! 2)%! *-&)%! %),'&#*)%! -! I$-! .2-%#O#.-.#5$! *'! .)$O#*'$.#-2#*-*D! 3I-$*)! %'! *#.'!UI'!I$!.#'(&)!#$O)(,'!'%&8!.2-%#O#.-*)!.),)!“reservado”, *'!O)(,-!UI'!2-%!.)4#-%!'%&8$!$I,'g (-*-%W! %52)! 4I'*'$! 22'6-(! -! .#'(&-%! 4'(%)$-%W! $)! *'1'$! %-2#(! *'2! ('.#$&)! J! *'1'$! %'(! *'%&(I#*-%! .)$.#'$QI*-,'$&'W! '&.D! %'! '%&8$! #,4)$#'$*)! I$-!%'(#'!*'!%-2:-6I-(*-%!4)(UI'!2)!)(*'$-!'2!('g 62-,'$&)W!%'.&)(#-2!)!'%4'.RO#.)!*'!2-!E(6-$#Q-.#5$D! Dependencias T)%!-.&#:)%!,8%!22-,-&#:)%!%I'2'$!%'(!2)%!*-&)%!J!2)%!%'(:#.#)%h!4'()!'%&)%!-.&#:)%!*'4'$*'$!*'! )&()%! -.&#:)%! ,8%! 4()%-#.)%! .),)! 4I'*'$! %'(! 2)%! 'UI#4)%W! 2-%! .),I$#.-.#)$'%! )! 2-%! O('.I'$&'g ,'$&'! )2:#*-*-%! 4'(%)$-%! UI'! &(-1-F-$! .)$! -UI'22)%D! /)(! '22)! -4-('.'! .),)! #,4)(&-$&'! '2! .)$g .'4&)!*'!j*'4'$*'$.#-%!'$&('!-.&#:)%k!)!2-!,'*#*-!'$!UI'!I$!-.&#:)!superior %'!:'(R-!-O'.&-*)!4)(! I$!#$.#*'$&'!*'!%'6I(#*-*!'$!I$!-.&#:)!inferior @<. ! ]'!*#.'!UI'!I$!j-.&#:)!%I4'(#)(k!*'4'$*'!*'!)&()!j-.&#:)!#$O'(#)(k!.I-$*)!2-%!$'.'%#*-*'%!*'!%'6Ig (#*-*!*'2!%I4'(#)(!%'!('O2'F-$!'$!2-%!$'.'%#*-*'%!*'!%'6I(#*-*!*'2!#$O'(#)(D!EW!*#.V)!'$!)&(-%!4-2-g 1(-%W!.I-$*)!2-!,-&'(#-2#Q-.#5$!*'!I$-!-,'$-Q-!'$!'2!-.&#:)!#$O'(#)(!&#'$'!.),)!.)$%'.I'$.#-!I$! 4'(FI#.#)!%)1('!'2!-.&#:)!%I4'(#)(D!H$O)(,-2,'$&'!4I'*'!#$&'(4('&-(%'!UI'!2)%!-.&#:)%!#$O'(#)('%!%)$! 2)%!4#2-('%!'$!2)%!UI'!%'!-4)J-!2-!%'6I(#*-*!*'!2)%!-.&#:)%!%I4'(#)('%D! +I$UI'!'$!.-*-!.-%)!V-J!UI'!-*-4&-(%'!-!2-!E(6-$#Q-.#5$!)1F'&)!*'2!-$82#%#%W!.)$!O('.I'$.#-!%'! 4I'*'!'%&(I.&I(-(!'2!.)$FI$&)!*'!-.&#:)%!'$!.-4-%W!*)$*'!2-%!.-4-%!%I4'(#)('%!*'4'$*'$!*'!2-%! #$O'(#)('%[! !" .-4-!@[!el entorno[!-.&#:)%!UI'!%'!4('.#%-$!4-(-!6-(-$&#Q-(!2-%!%#6I#'$&'%!.-4-%! !" 'UI#4-,#'$&)!J!%I,#$#%&()%[!'$'(6R-W!.2#,-&#Q-.#5$W!.),I$#.-.#)$'%! !" 4'(%)$-2[!*'!*#('..#5$W!*'!)4'(-.#5$W!*'!*'%-(()22)W!'&.D! !" )&()%[!'*#O#.#)%W!,)1#2#-(#)W!'&.D! !" .-4-!<[!el sistema de información!4()4#-,'$&'!*#.V)! !" 'UI#4)%!#$O)(,8&#.)%!(hardware) !" -42#.-.#)$'%!(software) !" .),I$#.-.#)$'%! !" %)4)(&'%!*'!#$O)(,-.#5$[!*#%.)%W!.#$&-%W!'&.D! !" .-4-!>[!la información !" *-&)%! !" ,'&-g*-&)%[!'%&(I.&I(-%W!R$*#.'%W!.2-:'%!*'!.#O(-W!'&.D! !" .-4-!B[!las funciones de la OrganizaciónW!UI'!FI%&#O#.-$!2-!'M#%&'$.#-!*'2!%#%&',-!*'!#$g O)(,-.#5$!J!2'!*-$!O#$-2#*-*! !" )1F'&#:)%!J!,#%#5$! !" 1#'$'%!J!%'(:#.#)%!4()*I.#*)%! !" .-4-!A[!otros!-.&#:)%! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! ! @@!L%!.),)!%#!'2!2'6#%2-*)(!VI1#'(-!('-2#Q-*)!'2!-$82#%#%!*'!(#'%6)%!4)(!$)%)&()%!J!VI1#'(-!*'&'(,#$-*)!2-%! %-2:-6I-(*-%!4'(&#$'$&'%D!L$!&)*)!.-%)W!2'J'%!J!('6I2-.#)$'%!'M#%&'$!J!-JI*-$!-!UI'!'%&)%!*-&)%W!.#'(g &-,'$&'!#,4)(&-$&'%W!'%&;$!4()&'6#*)%D! @<!9$!'F',42)!4I'*'!%'(!,'F)(!UI'!,#2!4-2-1(-%D!]#!%'!UI',-!'2!2).-2!UI'!V)%4'*-!2)%!'UI#4)%W!2)!UI'!$)! OI$.#)$-!'%!'2!%'(:#.#)!4'(.#1#*)!4)(!'2!I%I-(#)!-!r#25,'&()%!*'!*#%&-$.#-D!]#!()1-$!'2!4)(&8&#2!*'!I$!'F'.Ig &#:)!.)$!#$O)(,-.#5$!'%&(-&;6#.-!*'!2-!',4('%-W!2)!UI'!%IO('!'%!2-!.)$O#*'$.#-2#*-*!*'!*#.V-!#$O)(,-.#5$D! T-%!#$%&-2-.#)$'%!%'!('.)$%&(IJ'$h!4'()!4I'*'!V-1'(%'!4-%-*)!2-!)4)(&I$#*-*!*'!4('%&-(!'2!%'(:#.#)D!L2! ()1)!%'!%I1%-$-!.),4(-$*)!)&()!4)(&8&#2h!4'()!'2!%'.('&)!J-!'%&8!4'(*#*)D! =!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%! ! 486#$-!@N!?*'!@ABC!
  • 19. "-6'(#&!:'(%#5$!<! ! Z'-2#Q-.#5$!*'2!-$82#%#%!J!6'%&#5$! !" .('*#1#2#*-*!)!1I'$-!#,-6'$! !" .)$).#,#'$&)!-.I,I2-*)! !" #$*'4'$*'$.#-!*'!.(#&'(#)!)!-.&I-.#5$! !" #$&#,#*-*!*'!2-%!4'(%)$-%! !" #$&'6(#*-*!OR%#.-!*'!2-%!4'(%)$-%! Valoración X/)(!UI;!#$&'('%-!I$!-.&#:)Y!/)(!2)!UI'!:-2'D! 7)!%'!'%&8!V-12-$*)!*'!2)!UI'!.I'%&-$!2-%!.)%-%W!%#$)!*'!2)!UI'!:-2'$D!]#!-26)!$)!:-2'!4-(-!$-*-W! 4('%.R$*-%'!*'!'22)D!]#!$)!%'!4I'*'!4('%.#$*#(!#,4I$','$&'!*'!I$!-.&#:)W!'%!UI'!-26)!:-2'h!'%)! '%!2)!UI'!V-J!UI'!-:'(#6I-(!4I'%!'%)!'%!2)!UI'!V-J!UI'!4()&'6'(D! L2! :-2)(! 4I'*'! %'(! 4()4#)W! )! 4I'*'! %'(! -.I,I2-*)D! ]'! *#.'! UI'! 2)%! -.&#:)%! #$O'(#)('%! '$! I$! '%g UI',-!*'!*'4'$*'$.#-%W!-.I,I2-$!'2!:-2)(!*'!2)%!-.&#:)%!UI'!%'!-4)J-$!'$!'22)%D! L2!:-2)(!$I.2'-(!%I'2'!'%&-(!'$!2-!#$O)(,-.#5$!?)!*-&)%C!UI'!'2!%#%&',-!,-$'F-W!UI'*-$*)!2)%!*'g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imensiones '!I$!-.&#:)!4I'*'!#$&'('%-(!.-2#1(-(!*#O'('$&'%!*#,'$%#)$'%[! !" %I!autenticidad: XUI;!4'(FI#.#)!.-I%-(R-!$)!%-1'(!'M-.&-,'$&'!UI#'$!V-.'!)!V-!V'.V)! .-*-!.)%-Y! L%&-!:-2)(-.#5$!'%!&R4#.-!*'!%'(:#.#)%!?-I&'$&#.#*-*!*'2!I%I-(#)C!J!*'!2)%!*-&)%!?-I&'$&#.#g *-*!*'!UI#'$!-..'*'!-!2)%!*-&)%!4-(-!'%.(#1#(!)W!%#,42','$&'W!.)$%I2&-(C! !" %I!confidencialidad[!XUI;!*-c)!.-I%-(R-!UI'!2)!.)$).#'(-!UI#'$!$)!*'1'Y! L%&-!:-2)(-.#5$!'%!&R4#.-!*'!*-&)%D! !" %I!integridad[!XUI;!4'(FI#.#)!.-I%-(R-!UI'!'%&I:#'(-!*-c-*)!)!.)((I4&)Y! L%&-!:-2)(-.#5$!'%!&R4#.-!*'!2)%!*-&)%W!UI'!4I'*'$!'%&-(!,-$#4I2-*)%W!%'(!&)&-2!)!4-(.#-2g ,'$&'!O-2%)%!)W!#$.2I%)W!O-2&-(!*-&)%D! !" %I!disponibilidad[!XUI;!4'(FI#.#)!.-I%-(R-!$)!&'$'(2)!)!$)!4)*'(!I&#2#Q-(2)Y! L%&-!:-2)(-.#5$!'%!&R4#.-!*'!2)%!%'(:#.#)% @>D! L$!%#%&',-%!*'*#.-*)%!-!2-!-*,#$#%&(-.#5$!'2'.&(5$#.-!)!-2!.),'(.#)!'2'.&(5$#.)W!'2!.)$).#,#'$&)! *'!2)%!-.&)('%!'%!OI$*-,'$&-2!4-(-!4)*'(!4('%&-(!'2!%'(:#.#)!.)(('.&-,'$&'!J!4)*'(!4'(%'6I#(!2)%! O-22)%!?-..#*'$&-2'%!)!*'2#1'(-*)%C!UI'!4I*#'(-$!*-(%'D!L$!'%&)%!-.&#:)%W!-*',8%!*'!2-!-I&'$&#.#g *-*W!#$&'('%-!.-2#1(-(!2-[! !" 2-!trazabilidad!*'2!I%)!*'2!%'(:#.#)[!XUI;!*-c)!.-I%-(R-!$)!%-1'(!-!UI#;$!%'!2'!4('%&-!&-2! %'(:#.#)Y!E!%'-W!XUI#;$!V-.'!UI;!J!.I8$*)Y! !" 2-!trazabilidad!*'2!-..'%)!-!2)%!*-&)%[!XUI;!*-c)!.-I%-(R-!$)!%-1'(!UI#;$!-..'*'!-!UI;! *-&)%!J!UI;!V-.'!.)$!'22)%Y! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! ! @>!i-J!%'(:#.#)%!O#$-2'%!UI'!,-&'(#-2#Q-$!2-!,#%#5$!02&#,-!*'!2-!E(6-$#Q-.#5$D!i-J!%'(:#.#)%!#$&'($)%!*'!2)%! UI'!2-!E(6-$#Q-.#5$!%'!%#(:'!4-(-!'%&(I.&I(-(!%I!4()4#-!*#%&(#1I.#5$!*'!('%4)$%-1#2#*-*'%D!/)(!02&#,)W!V-J! %'(:#.#)%!UI'!%'!-*UI#'('$!*'!)&(-%!)(6-$#Q-.#)$'%[!%I,#$#%&()%!'M&'($)%D! =!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%! ! 486#$-!@P!?*'!@ABC!
  • 20. "-6'(#&!:'(%#5$!<! ! Z'-2#Q-.#5$!*'2!-$82#%#%!J!6'%&#5$! ]'!('.)$).'$!V-1#&I-2,'$&'!2-%!*#,'$%#)$'%!18%#.-%[!-I&'$&#.#*-*W!.)$O#*'$.#-2#*-*W!#$&'6(#*-*!J! *#%4)$#1#2#*-*D!L$!'%&-!,'&)*)2)6R-!%'!V-!('O#$-*)!2-!-I&'$&#.#*-*!4-(-!*#%&#$6I#(!'$&('!'2!I%)!*'! I$!%'(:#.#)!J!'2!-..'%)!-!I$)%!*-&)%D!+*',8%!%'!V-!#$&()*I.#*)!'2!.)$.'4&)!*'!&(-Q-1#2#*-*!?*'2! #$62;%W!accountabilityC!&),-*)!*'!2-%!6IR-%!H]EdHL3!@>>>AW!#6I-2,'$&'!%'6,'$&-*-!'$&(-!2-!&(-Q-g 1#2#*-*!*'2!%'(:#.#)!J!2-!*'!2)%!*-&)%D!T)%!-%4'.&)%!*'!-I&'$&#.#*-*!J!&(-Q-1#2#*-*!*'!2)%!*-&)%!%)$! .(R&#.)%! 4-(-! %-&#%O-.'(! ,'*#*-%! ('62-,'$&-(#-%! %)1('! O#.V'()%! UI'! .)$&'$6-$! *-&)%! *'! .-(8.&'(! 4'(%)$-2D! L2!.-4R&I2)!>!*'2!m3-&82)6)!*'!L2','$&)%m!4('%'$&-!I$-!('2-.#5$!*'!*#,'$%#)$'%!*'!%'6I(#*-*D! L$!I$!8(1)2!*'!*'4'$*'$.#-%W!*)$*'!2)%!-.&#:)%!%I4'(#)('%!*'4'$*'$!*'!2)%!#$O'(#)('%W!'%!#,4('%g .#$*#12'!:-2)(-(!2)%!-.&#:)%!%I4'(#)('%W!2)%!UI'!%)$!#,4)(&-$&'%!4)(!%R!,#%,)%D!+I&),8&#.-,'$&'! '%&'!:-2)(!%'!-.I,I2-!'$!2)%!#$O'(#)('%W!2)!UI'!$)!'%!51#.'!4-(-!UI'!&-,1#;$!4I'*-$!,'('.'(W!-*#g .#)$-2,'$&'W!%I!:-2)(-.#5$!4()4#-D! ¿Cuánto vale la “salud” de los activos? 9$-!:'Q!*'&'(,#$-*-%!UI;!*#,'$%#)$'%!?*'!%'6I(#*-*C!#$&'('%-$!*'!I$!-.&#:)!V-J!UI'!4().'*'(!-! :-2)(-(2)D! T-! :-2)(-.#5$! '%! 2-! *'&'(,#$-.#5$! *'2!.)%&'!UI'!%I4)$*(R-!%-2#(!*'!I$-!#$.#*'$.#-!UI'! *'%&()Q-(-!'2!-.&#:)D!i-J!,I.V)%!O-.&)('%!-!.)$%#*'(-([! !" .)%&'!*'!('4)%#.#5$[!-*UI#%#.#5$!'!#$%&-2-.#5$! !" .)%&'!*'!,-$)!*'!)1(-!?'%4'.#-2#Q-*-C!#$:'(&#*-!'$!('.I4'(-(!?'2!:-2)(C!*'2!-.&#:)! !" 2I.()!.'%-$&'[!4;(*#*-!*'!#$6('%)%! !" .-4-.#*-*!*'!)4'(-([!.)$O#-$Q-!*'!2)%!I%I-(#)%!J!4():''*)('%!UI'!%'!&(-*I.'!'$!I$-!4;(*#g *-!*'!-.&#:#*-*!)!'$!4')('%!.)$*#.#)$'%!'.)$5,#.-%! !" %-$.#)$'%!4)(!#$.I,42#,#'$&)!*'!2-!2'J!I!)12#6-.#)$'%!.)$&(-.&I-2'%! !" *-c)!-!)&()%!-.&#:)%W!4()4#)%!)!-F'$)%! !" *-c)!-!4'(%)$-%! !" *-c)%!,'*#)-,1#'$&-2'%! T-!:-2)(-.#5$!4I'*'!%'(!.I-$&#&-&#:-!?.)$!I$-!.-$&#*-*!$I,;(#.-C!)!.I-2#&-&#:-!?'$!-26I$-!'%.-2-! *'!$#:'2'%CD!T)%!.(#&'(#)%!,8%!#,4)(&-$&'%!-!('%4'&-(!%)$[! !" 2-! homogeneidad[! '%! #,4)(&-$&'! 4)*'(! .),4-(-(! :-2)('%! -I$UI'! %'-$! *'! *#O'('$&'%! *#g ,'$%#)$'%!-!O#$!*'!4)*'(!.),1#$-(!:-2)('%!4()4#)%!J!:-2)('%!-.I,I2-*)%W!-%R!.),)!4)*'(! *'&'(,#$-(!%#!'%!,8%!6(-:'!'2!*-c)!'$!I$-!*#,'$%#5$!)!'$!)&(-! !" 2-!relatividad[!'%!#,4)(&-$&'!4)*'(!('2-&#:#Q-(!'2!:-2)(!*'!I$!-.&#:)!'$!.),4-(-.#5$!.)$!)&()%! -.&#:)%! `)*)%!'%&)%!.(#&'(#)%!%'!%-&#%O-.'$!.)$!:-2)(-.#)$'%!'.)$5,#.-%!?.)%&'!*#$'(-(#)!('UI'(#*)!4-(-! j.I(-(k!'2!-.&#:)C!J!'%!O('.I'$&'!2-!&'$&-.#5$!*'!4)$'(2'!4('.#)!-!&)*)D!]#!%'!.)$%#6I'W!'M.'2'$&'D! H$.2I%)!'%!O8.#2!4)$'(2'!4('.#)!-!2)%!-%4'.&)%!,8%!&-$6#12'%!?'UI#4-,#'$&)W!V)(-%!*'!&(-1-F)W!'&.DCh! 4'()!-2!'$&(-(!'$!:-2)(-.#)$'%!,8%!-1%&(-.&-%!?#$&-$6#12'%!.),)!2-!.('*#1#2#*-*!*'!2-!E(6-$#Q-.#5$C! 2-!:-2)(-.#5$!'.)$5,#.-!'M-.&-!4I'*'!%'(!'%.I((#*#Q-!J!,)&#:)!*'!-6(#-%!*#%4I&-%!'$&('!'M4'(&)%D! L2!.-4R&I2)!B!*'2!m3-&82)6)!*'!L2','$&)%m!4('%'$&-!I$-%!4-I&-%!4-(-!2-!:-2)(-.#5$!%#%&',8&#.-!*'! -.&#:)%D! Valoración cualitativa T-%!'%.-2-%!.I-2#&-&#:-%!4'(,#&'$!-:-$Q-(!.)$!(-4#*'QW!4)%#.#)$-$*)!'2!:-2)(!*'!.-*-!-.&#:)!'$!I$! )(*'$! ('2-&#:)! ('%4'.&)! *'! 2)%! *',8%D! L%! O('.I'$&'! 42-$&'-(! '%&-%! '%.-2-%! .),)! j5(*'$'%! *'! ,-6$#&I*k!JW!'$!.)$%'.I'$.#-W!*'(#:-(!'%&#,-.#)$'%!*'2!)(*'$!*'!,-6$#&I*!*'2!(#'%6)D! T-!2#,#&-.#5$!*'!2-%!:-2)(-.#)$'%!.I-2#&-&#:-%!'%!UI'!$)!4'(,#&'$!.),4-(-(!:-2)('%!,8%!-228!*'!%I! )(*'$!('2-&#:)D!7)!%'!4I'*'$!%I,-(!:-2)('%D! =!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%! ! 486#$-!<S!?*'!@ABC!
  • 21. "-6'(#&!:'(%#5$!<! ! Z'-2#Q-.#5$!*'2!-$82#%#%!J!6'%&#5$! L2!.-4R&I2)!ND@!*'!2-!m^IR-!*'!`;.$#.-%m!4('%'$&-!I$!,)*'2)!*'!-$82#%#%!1-%-*)!'$!:-2)(-.#)$'%! .I-2#&-&#:-%D! Valoración cuantitativa T-%!:-2)(-.#)$'%!$I,;(#.-%!-1%)2I&-%!.I'%&-$!,I.V)!'%OI'(Q)h!4'()!$)!-*)2'.'$!*'!2)%!4()12'g ,-%!*'!2-%!:-2)(-.#)$'%!.I-2#&-&#:-%D!]I,-(!:-2)('%!$I,;(#.)%!'%!-1%)2I&-,'$&'!j$-&I(-2k!J!2-!#$g &'(4('&-.#5$!*'!2-%!%I,-%!$)!'%!$I$.-!,)&#:)!*'!.)$&():'(%#-D! ]#!2-!:-2)(-.#5$!'%!*#$'(-(#-W!-*',8%!%'!4I'*'$!V-.'(!'%&I*#)%!'.)$5,#.)%!.),4-(-$*)!2)!UI'! %'!-((#'%6-!.)$!2)!UI'!.I'%&-!2-!%)2I.#5$!('%4)$*#'$*)!-!2-%!4('6I$&-%[! !" X_-2'!2-!4'$-!#$:'(&#(!&-$&)!*#$'()!'$!'%&-!%-2:-6I-(*-Y! !" XsI;!.)$FI$&)!*'!%-2:-6I-(*-%!)4&#,#Q-$!2-!#$:'(%#5$Y! !" XL$!UI;!42-Q)!*'!&#',4)!%'!('.I4'(-!2-!#$:'(%#5$Y! !" X3I8$&)!'%!(-Q)$-12'!UI'!.I'%&'!2-!4(#,-!*'!I$!%'6I()Y! L2!.-4R&I2)!ND<!*'!2-!m^IR-!*'!`;.$#.-%m!4('%'$&-!I$!,)*'2)!*'!-$82#%#%!1-%-*)!'$!:-2)(-.#)$'%! .I-$&#&-&#:-%D! El valor de la interrupción del servicio 3-%#!&)*-%!2-%!*#,'$%#)$'%!,'$.#)$-*-%!-$&'(#)(,'$&'!4'(,#&'$!I$-!:-2)(-.#5$!%#,42'W!.I-2#&-&#g :-!)!.I-$&#&-&#:-D!/'()!V-J!I$-!'M.'4.#5$W!2-!*#%4)$#1#2#*-*D! 7)!'%!2)!,#%,)!#$&'((I,4#(!I$!%'(:#.#)!I$-!V)(-!)!I$!*R-!)!I$!,'%D!/I'*'!UI'!I$-!V)(-!*'!*'&'$g .#5$!%'-!#(('2':-$&'W!,#'$&(-%!UI'!I$!*R-!%#$!%'(:#.#)!.-I%-!I$!*-c)!,)*'(-*)h!4'()!I$!,'%!*'&'g $#*)!%I4)$6-!2-!&'(,#$-.#5$!*'!2-!-.&#:#*-*D!o!2)!,-2)!'%!UI'!$)!'M#%&'!4()4)(.#)$-2#*-*!'$&('!'2! &#',4)!*'!#$&'((I4.#5$!J!2-%!.)$%'.I'$.#-%D!! L$!.)$%'.I'$.#-W!4-(-!:-2)(-(!2-!p#$&'((I4.#5$!*'!2-q!*#%4)$#1#2#*-*!*'!I$!-.&#:)!V-J!UI'!I%-(!I$-! '%&(I.&I(-!,8%!.),42'F-!UI'!%'!4I'*'!('%I,#(!'$!-260$!6(8O#.)!.),)!'2!%#6I#'$&'[! coste de [la interrupción de la] disponibilidad > < @ S @A, >S, @V <V GV @* <* @% <% @, <, G, ! @- &)&-2 *)$*'! -4-('.'! I$-! %'(#'! *'! '%.-2)$'%! *'! #$&'((I4.#5$! UI'! &'(,#$-$! .)$! 2-! *'%&(I..#5$! &)&-2! )! 4'(,-$'$&'! *'2! -.&#:)D! L$! '2! 'F',42)! -$&'(#)(W! 4-(-*-%! *'! V-%&-! G! V)(-%! %'! 4I'*'$! -%I,#(! %#$! .)$%'.I'$.#-%D!/'()!-!2-%!G!V)(-%!%'!*#%4-(-$!2-%!-2-(,-%!UI'!-I,'$&-$!%#!2-!4-(-*-!%I4'(-!2)%! <!*R-%D!o!%#!2-!4-(-*-!%I4'(-!'2!,'%W!%'!4I'*'!*'.#(!UI'!2-!E(6-$#Q-.#5$!V-!4'(*#*)!%I!.-4-.#*-*! *'!)4'(-([!V-!,I'(&)D!'%*'!'2!4I$&)!*'!:#%&-!*'!2)%!(','*#)%W!2-!6(8O#.-!*#.'!*#('.&-,'$&'!UI'!$)! V-J!UI'!6-%&-(%'!$#!I$!'I()!4)(!':#&-(!4-(-*-%!*'!,'$)%!*'!G!V)(-%D!_-2'!2-!4'$-!I$!.#'(&)!6-%&)! 4)(!#,4'*#(!UI'!I$-!4-(-*-!%I4'('!2-%!G!V)(-%!)!2)%!<!*R-%D!o!.I-$*)!%'!:-2)('!2)!UI'!.I'%&-!#,g 4'*#(!UI'!2-!4-(-*-!%I4'(-!'2!,'%W!V-J!UI'!4)$'(!'$!2-!1-2-$Q-!&)*)!'2!:-2)(!*'!2-!E(6-$#Q-.#5$! O('$&'!-2!.)%&'!*'!2-%!%-2:-6I-(*-%D!/I*#'(-!%'(!UI'!$)!:-2#'(-!2-!4'$-D! =!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%! ! 486#$-!<@!?*'!@ABC!
  • 22. "-6'(#&!:'(%#5$!<! ! Z'-2#Q-.#5$!*'2!-$82#%#%!J!6'%&#5$! 2.1.2. Paso 2: Amenazas L2! %#6I#'$&'! 4-%)! .)$%#%&'! '$! *'&'(,#$-(! 2-%! -,'$-Q-%! UI'! 4I'*'$! -O'.&-(! -! .-*-! -.&#:)D! T-%! -,'$-Q-%!%)$!j.)%-%!UI'!).I(('$kD!oW!*'!&)*)!2)!UI'!4I'*'!).I((#(W!#$&'('%-!2)!UI'!4I'*'!4-%-(2'! -!$I'%&()%!-.&#:)%!J!.-I%-(!I$!*-c)D!! i-J! -..#*'$&'%! $-&I(-2'%! ?&'((',)&)%W! #$I$*-.#)$'%W! DDDC! J!*'%-%&('%!#$*I%&(#-2'%!?.)$&-,#$-.#5$W! O-22)%!'2;.&(#.)%W!DDDC!-$&'!2)%!.I-2'%!'2!%#%&',-!*'!#$O)(,-.#5$!'%!:R.&#,-!4-%#:-h!4'()!$)!4)(!%'(! 4-%#:)%!V-J!UI'!4'(,-$'.'(!#$*'O'$%)%D!i-J!-,'$-Q-%!.-I%-*-%!4)(!2-%!4'(%)$-%W!1#'$!'(()('%W! 1#'$!-&-UI'%!#$&'$.#)$-*)%D!! L2!.-4R&I2)!A!*'2!m3-&82)6)!*'!L2','$&)%m!4('%'$&-!I$-!('2-.#5$!*'!-,'$-Q-%!&R4#.-%D! 7)!&)*-%!2-%!-,'$-Q-%!-O'.&-$!-!&)*)%!2)%!-.&#:)% @BW!%#$)!UI'!V-J!I$-!.#'(&-!('2-.#5$!'$&('!'2!&#4)! *'!-.&#:)!J!2)!UI'!2'!4)*(R-!).I((#(D! Valoración de las amenazas 3I-$*)!I$!-.&#:)!'%!:R.&#,-!*'!I$-!-,'$-Q-W!$)!%'!:'!-O'.&-*)!'$!&)*-%!%I%!*#,'$%#)$'%W!$#!'$! 2-!,#%,-!.I-$&R-D! 9$-!:'Q!*'&'(,#$-*)!UI'!I$-!-,'$-Q-!4I'*'!4'(FI*#.-(!-!I$!-.&#:)W!V-J!UI'!'%&#,-(!.I8$!:I2$'g (-12' @A!'%!'2!-.&#:)W!'$!*)%!%'$&#*)%[! degradación:!.I8$!4'(FI*#.-*)!('%I2&-(R-!'2!-.&#:)! frecuencia: .-*-!.I8$&)!%'!,-&'(#-2#Q-!2-!-,'$-Q-! T-!*'6(-*-.#5$!,#*'!'2!*-c)!.-I%-*)!4)(!I$!#$.#*'$&'!'$!'2!%I4I'%&)!*'!UI'!).I((#'(-D! T-!*'6(-*-.#5$!%'!%I'2'!.-(-.&'(#Q-(!.),)!I$-!O(-..#5$!*'2!:-2)(!*'2!-.&#:)!J!-%R!-4-('.'$!'M4('g %#)$'%! .),)! UI'! I$! -.&#:)! %'! V-! :#%&)! j&)&-2,'$&'! *'6(-*-*)kW! )! j*'6(-*-*)! '$! I$-! 4'UI'c-! O(-..#5$kD! 3I-$*)! 2-%! -,'$-Q-%! $)! %)$! #$&'$.#)$-2'%W! 4()1-12','$&'! 1-%&'! .)$).'(! 2-! O(-..#5$! OR%#.-,'$&'!4'(FI*#.-*-!*'!I$!-.&#:)!4-(-!.-2.I2-(!2-!4;(*#*-!4()4)(.#)$-2!*'!:-2)(!UI'!%'!4#'(*'D! /'()!.I-$*)!2-!-,'$-Q-!'%!#$&'$.#)$-2W!$)!%'!4I'*'!4'$%-(!'$!4()4)(.#)$-2#*-*!-26I$-!4I'%!'2! -&-.-$&'!4I'*'!.-I%-(!,I.VR%#,)!*-c)!*'!O)(,-!%'2'.&#:-D! T-!O('.I'$.#- @G!4)$'!'$!4'(%4'.&#:-!-UI'22-!*'6(-*-.#5$W!4I'%!I$-!-,'$-Q-!4I'*'!%'(!*'!&'((#g 12'%! .)$%'.I'$.#-%! 4'()! *'! ,IJ! #,4()1-12'! ,-&'(#-2#Q-.#5$h! ,#'$&(-%! UI'! )&(-! -,'$-Q-! 4I'*'! %'(!*'!,IJ!1-F-%!.)$%'.I'$.#-%W!4'()!&-$!O('.I'$&'!.),)!4-(-!-.-1-(!-.I,I2-$*)!I$!*-c)!.)$g %#*'(-12'D! T-!O('.I'$.#-!%'!,)*'2-!.),)!I$-!&-%-!-$I-2!*'!).I(('$.#-W!%#'$*)!:-2)('%!&R4#.)%! @SS! ,IJ!O('.I'$&'! -!*#-(#)! @S! O('.I'$&'! ,'$%I-2,'$&'! @! $)(,-2! I$-!:'Q!-2!-c)! @d@S! 4).)!O('.I'$&'! .-*-!:-(#)%!-c)%! ! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! ! @B!T-%!#$%&-2-.#)$'%!4I'*'$!#$.'$*#-(%'h!4'()!2-%!-42#.-.#)$'%W!$)D!T-%!4'(%)$-%!4I'*'$!%'(!)1F'&)!*'!I$! -&-UI'!1-.&'(#)256#.)h!4'()!2)%!%'(:#.#)%W!$)D!]#$!',1-(6)W!2)%!:#(I%!#$O)(,8&#.)%!-O'.&-$!-!2-%!-42#.-.#)g $'%W!$)!-!2-%!4'(%)$-%D! @A!T)%!2'.&)('%!O-,#2#-(#Q-*)%!.)$!"-6'(#&!:@DSW!*'&'.&-(8$!2-!-I%'$.#-!*'!2-!:)Q!j:I2$'(-1#2#*-*kD!L2!.)$.'4g &)!*'!:I2$'(-1#2#*-*!?4)&'$.#-2#*-*!)!4)%#1#2#*-*!*'!).I(('$.#-!*'!I$-!-,'$-Q-!%)1('!I$!-.&#:)C!%'!#$g .)(4)(-!4)(!,'*#)!*'!2-%!,;&(#.-%!*'!*'6(-*-.#5$!*'2!-.&#:)!J!O('.I'$.#-!*'!).I(('$.#-!*'!2-!-,'$-Q-D! @G!]'!,#*'!.),)!'2!$0,'()!,'*#)!*'!).I(('$.#-%!*'!2-!-,'$-Q-!'$!I$!#$&'(:-2)!*'&'(,#$-*)!*'!&#',4)D! `R4#.-,'$&'!'%&#,-!%)1('!4'(#)*)%!-$I-2'%D!/)(!'F',42)W!%#!'$!I$!.#'(&)!%#%&',-!%'!4()*I.'!I$-!-:'(R-! *'2!-#('!-.)$*#.#)$-*)!I$!4(),'*#)!*'!.#$.)!:'.'%!'$!I$!-c)W!'%-!'%!2-!O('.I'$.#-[!AD! =!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%! ! 486#$-!<<!?*'!@ABC!
  • 23. "-6'(#&!:'(%#5$!<! ! Z'-2#Q-.#5$!*'2!-$82#%#%!J!6'%&#5$! 2.1.3. Paso 4: Determinación del impacto ]'!*'$),#$-!#,4-.&)!-!2-!,'*#*-!*'2!*-c)!%)1('!'2!-.&#:)!*'(#:-*)!*'!2-!,-&'(#-2#Q-.#5$!*'!I$-! -,'$-Q-D!3)$).#'$*)!'2!:-2)(!*'!2)%!-.&#:)%!?'$!:-(#-%!*#,'$%#)$'%C!J!2-!*'6(-*-.#5$!UI'!.-I%-$! 2-%!-,'$-Q-%W!'%!*#('.&)!*'(#:-(!'2!#,4-.&)!UI'!'%&-%!&'$*(R-$!%)1('!'2!%#%&',-D!T-!0$#.-!.)$%#*'g (-.#5$!UI'!UI'*-!V-.'(!'%!('2-&#:-!-!2-%!*'4'$*'$.#-%!'$&('!-.&#:)%D!L%!O('.I'$&'!UI'!'2!:-2)(!*'2! %#%&',-! *'! #$O)(,-.#5$! %'! .'$&('! '$! 2)%! %'(:#.#)%! UI'! 4('%&-! J! 2)%! *-&)%! UI'! ,-$'F-W! -2! &#',4)! UI'!2-%!-,'$-Q-%!%I'2'$!,-&'(#-2#Q-(%'!'$!2)%!,'*#)%D! Impacto acumulado L%!'2!.-2.I2-*)!%)1('!I$!-.&#:)!&'$#'$*)!'$!.I'$&-! !" %I!:-2)(!-.I,I2-*)!?'2!4()4#)!,-%!'2!-.I,I2-*)!*'!2)%!-.&#:)%!UI'!*'4'$*'$!*'!;2C! !" 2-%!-,'$-Q-%!-!UI'!'%&8!'M4I'%&)! L2!#,4-.&)!-.I,I2-*)!%'!.-2.I2-!4-(-!.-*-!-.&#:)W!4)(!.-*-!-,'$-Q-!J!'$!.-*-!*#,'$%#5$!*'!:-g 2)(-.#5$W!%#'$*)!I$-!OI$.#5$!*'2!:-2)(!-.I,I2-*)!J!*'!2-!*'6(-*-.#5$!.-I%-*-D! L2!#,4-.&)!'%!&-$&)!,-J)(!.I-$&)!,-J)(!'%!'2!:-2)(!4()4#)!)!-.I,I2-*)!%)1('!I$!-.&#:)D! L2!#,4-.&)!'%!&-$&)!,-J)(!.I-$&)!,-J)(!%'-!2-!*'6(-*-.#5$!*'2!-.&#:)!-&-.-*)D! L2!#,4-.&)!-.I,I2-*)W!-2!.-2.I2-(%'!%)1('!2)%!-.&#:)%!UI'!%)4)(&-$!'2!4'%)!*'2!%#%&',-!*'!#$O)(g ,-.#5$W!4'(,#&'!*'&'(,#$-(!2-%!%-2:-6I-(*-%!*'!UI'!V-J!UI'!*)&-(!-!2)%!,'*#)%!*'!&(-1-F)[!4()g &'..#5$!*'!2)%!'UI#4)%W!.)4#-%!*'!('%4-2*)W!'&.D! Impacto repercutido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gregación de valores de impacto T)%!48((-O)%!-$&'(#)('%!*'&'(,#$-$!'2!#,4-.&)!UI'!%)1('!I$!-.&#:)!&'$*(R-!I$-!-,'$-Q-!'$!!I$-! .#'(&-!*#,'$%#5$D!L%&)%!#,4-.&)%!%#$6I2-('%!4I'*'$!-6('6-(%'!1-F)!.#'(&-%!.)$*#.#)$'%[! !" 4I'*'!-6('6-(%'!'2!#,4-.&)!('4'(.I&#*)!%)1('!*#O'('$&'%!-.&#:)%W! !" 4I'*'!-6('6-(%'!'2!#,4-.&)!-.I,I2-*)!%)1('!-.&#:)%!UI'!$)!%'-$!*'4'$*#'$&'%!'$&('!%RW!$#! *'4'$*-$!*'!$#$60$!-.&#:)!%I4'(#)(!.),0$W! !" $)!*'1'!-6('6-(%'!'2!#,4-.&)!-.I,I2-*)!%)1('!-.&#:)%!UI'!$)!%'-$!#$*'4'$*#'$&'%W!4I'%! '22)!%I4)$*(R-!%)1('!4)$*'(-(!'2!#,4-.&)!-2!#$.2I#(!:-(#-%!:'.'%!'2!:-2)(!-.I,I2-*)!*'!-.&#g :)%!%I4'(#)('%W! !" 4I'*'! -6('6-(%'! '2! #,4-.&)! *'! *#O'('$&'%! -,'$-Q-%! %)1('! I$! ,#%,)! -.&#:)W! -I$UI'! .)$g :#'$'!.)$%#*'(-(!'$!UI;!,'*#*-!2-%!*#O'('$&'%!-,'$-Q-%!%)$!#$*'4'$*#'$&'%!J!4I'*'$!%'(! .)$.I(('$&'%W! =!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%! ! 486#$-!<>!?*'!@ABC!
  • 24. "-6'(#&!:'(%#5$!<! ! Z'-2#Q-.#5$!*'2!-$82#%#%!J!6'%&#5$! !" 4I'*'!-6('6-(%'!'2!#,4-.&)!*'!I$-!-,'$-Q-!'$!*#O'('$&'%!*#,'$%#)$'%D! 2.1.4. Paso 5: Determinación del riesgo ]'!*'$),#$-!(#'%6)!-!2-!,'*#*-!*'2!*-c)!4()1-12'!%)1('!I$!%#%&',-D!3)$).#'$*)!'2!#,4-.&)!*'! 2-%! -,'$-Q-%! %)1('! 2)%! -.&#:)%W! '%! *#('.&)! *'(#:-(! '2! (#'%6)! %#$! ,8%! UI'! &'$'(! '$! .I'$&-! 2-! O('g .I'$.#-!*'!).I(('$.#-D! L2!(#'%6)!.('.'!.)$!'2!#,4-.&)!J!.)$!2-!O('.I'$.#-D! Riesgo acumulado L%!'2!.-2.I2-*)!%)1('!I$!-.&#:)!&'$#'$*)!'$!.I'$&-! !" '2!#,4-.&)!-.I,I2-*)!%)1('!I$!-.&#:)!*'1#*)!-!I$-!-,'$-Q-!J! !" 2-!O('.I'$.#-!*'!2-!-,'$-Q-! L2!(#'%6)!-.I,I2-*)!%'!.-2.I2-!4-(-!.-*-!-.&#:)W!4)(!.-*-!-,'$-Q-!J!'$!.-*-!*#,'$%#5$!*'!:-2)g (-.#5$W! %#'$*)! I$-! OI$.#5$! *'2! :-2)(! -.I,I2-*)W! 2-! *'6(-*-.#5$! .-I%-*-! J! 2-! O('.I'$.#-! *'! 2-! -,'$-Q-D! L2!(#'%6)!-.I,I2-*)W!-2!.-2.I2-(%'!%)1('!2)%!-.&#:)%!UI'!%)4)(&-$!'2!4'%)!*'2!%#%&',-!*'!#$O)(,-g .#5$W!4'(,#&'!*'&'(,#$-(!2-%!%-2:-6I-(*-%!*'!UI'!V-J!UI'!*)&-(!-!2)%!,'*#)%!*'!&(-1-F)[!4()&'.g .#5$!*'!2)%!'UI#4)%W!.)4#-%!*'!('%4-2*)W!'&.D! Riesgo repercutido L%!'2!.-2.I2-*)!%)1('!I$!-.&#:)!&'$#'$*)!'$!.I'$&-! !" '2!#,4-.&)!('4'(.I&#*)!%)1('!I$!-.&#:)!*'1#*)!-!I$-!-,'$-Q-!J! !" 2-!O('.I'$.#-!*'!2-!-,'$-Q-! L2!(#'%6)!('4'(.I&#*)!%'!.-2.I2-!4-(-!.-*-!-.&#:)W!4)(!.-*-!-,'$-Q-!J!'$!.-*-!*#,'$%#5$!*'!:-2)g (-.#5$W!%#'$*)!I$-!OI$.#5$!*'2!:-2)(!4()4#)W!2-!*'6(-*-.#5$!.-I%-*-!J!2-!O('.I'$.#-!*'!2-!-,'$-g Q-D! L2! (#'%6)! ('4'(.I&#*)W! -2! .-2.I2-(%'! %)1('! 2)%! -.&#:)%! UI'! &#'$'$! :-2)(! 4()4#)W! 4'(,#&'! *'&'(,#$-(! 2-%!.)$%'.I'$.#-%!*'!2-%!#$.#*'$.#-%!&;.$#.-%!%)1('!2-!,#%#5$!*'2!%#%&',-!*'!#$O)(,-.#5$D!L%!4I'%! I$-! 4('%'$&-.#5$! 6'('$.#-2! UI'! -JI*-! -! &),-(! I$-! *'! 2-%! *'.#%#)$'%! .(R&#.-%! *'! I$! -$82#%#%! *'! (#'%6)%[!-.'4&-(!I$!.#'(&)!$#:'2!*'!(#'%6)D!! Agregación de riesgos T)%! 48((-O)%! -$&'(#)('%! *'&'(,#$-$! '2! (#'%6)! UI'! %)1('! I$! -.&#:)! &'$*(R-! I$-! -,'$-Q-! '$! ! I$-! .#'(&-!*#,'$%#5$D!L%&)%!(#'%6)%!%#$6I2-('%!4I'*'$!-6('6-(%'!1-F)!.#'(&-%!.)$*#.#)$'%[! !" 4I'*'!-6('6-(%'!'2!(#'%6)!('4'(.I&#*)!%)1('!*#O'('$&'%!-.&#:)%W! !" 4I'*'!-6('6-(%'!'2!(#'%6)!-.I,I2-*)!%)1('!-.&#:)%!UI'!$)!%'-$!*'4'$*#'$&'%!'$&('!%RW!$#! *'4'$*-$!*'!$#$60$!-.&#:)!%I4'(#)(!.),0$W! !" $)!*'1'!-6('6-(%'!'2!(#'%6)!-.I,I2-*)!%)1('!-.&#:)%!UI'!$)!%'-$!#$*'4'$*#'$&'%W!4I'%!'22)! %I4)$*(R-!%)1('!4)$*'(-(!'2!(#'%6)!-2!#$.2I#(!:-(#-%!:'.'%!'2!:-2)(!-.I,I2-*)!*'!-.&#:)%!%Ig 4'(#)('%W! !" 4I'*'!-6('6-(%'!'2!(#'%6)!*'!*#O'('$&'%!-,'$-Q-%!%)1('!I$!,#%,)!-.&#:)W!-I$UI'!.)$:#'$'! .)$%#*'(-(!'$!UI;!,'*#*-!2-%!*#O'('$&'%!-,'$-Q-%!%)$!#$*'4'$*#'$&'%!J!4I'*'$!%'(!.)$.Ig (('$&'%W! !" 4I'*'!-6('6-(%'!'2!(#'%6)!*'!I$-!-,'$-Q-!'$!*#O'('$&'%!*#,'$%#)$'%D! 2.1.5. Paso 3: Salvaguardas L$! 2)%! 4-%)%! -$&'(#)('%! $)! %'! V-$! &),-*)! '$! .)$%#*'(-.#5$! 2-%! %-2:-6I-(*-%! *'%42'6-*-%D! ]'! ,#*'$W!4)(!&-$&)W!2)%!#,4-.&)%!J!(#'%6)%!-!UI'!'%&-(R-$!'M4I'%&)%!2)%!-.&#:)%!%#!$)!%'!4()&'6#'(-$! =!"#$#%&'(#)!*'!+*,#$#%&(-.#)$'%!/012#.-%! ! 486#$-!<B!?*'!@ABC!