Analysis of Appropriate Security Processes to Mitigate Risk in a Popular Election System

The Consejo Nacional Electoral of Ecuador has been seriously questioned with the implementation of the System of Transmission and Publication of Results (STPR). Descriptive tables of threats and controls were analyzed; to determine criteria such as: loss of integrity, loss of availability and loss of confidentiality. The objective was to identify the security protocols, determining the processes that make up the electoral vote. The qualitative documentary analysis and impact of the analyzed threats was used. In this way the results said that the system is highly vulnerable to threats of human origin, the highest risks are the threats of computer criminals or malicious collaborators. It was concluded that the greatest risk lies in the employees, their selection and hiring must be carried out without incidents of the policy, that comply with a professional profile according to the functions or tasks that they will fulfill and that demonstrate values such as honesty and ethics.