Methodology for the assurance of educational IT environments

With the passage of time, technological advances in computer and telecommunications technology, both in software and hardware, are becoming more evident every day, a phenomenon that brings with it countless benefits for individuals and entities in terms of information management and connectivity worldwide, however, at the same time, a large number of threats related to this technological evolution arise. Taking into account the above, the Ministry of National Defence has allocated a large part of its resources to guarantee the security of all its information systems, which is why specialised departments have been created to consolidate effective IT security that allows the protection of relevant information for the Military and Police Forces, and therefore for the country. Such a mission could not be applied to real computer environments without a concrete strategy of information security practices. The objective of this work is to formulate a methodology aimed at securing computer environments in training schools, taking into account the functions of the personnel who use computer equipment.