Experience in Applying the Analysis and Risk Management Methodology called MAGERIT to Identify Threats and Vulnerabilities in an Agro-industrial Company

摘要

The present work focuses on sharing our experience in applying the methodology MAGERIT to identify threats and vulnerabilities that could be materialized in risks and affect company's financial statements. The present work was executed in a real company of the Agro-industrial field. The research results indicate that the application of ISO/IEC 270000 standard with the help of MARGERIT and PILAR is an excellent combination for identifying the risks and proposing the controls to mitigate them, to improve the Information Security Management of an organization.