{"id":17632,"date":"2026-06-26T10:00:29","date_gmt":"2026-06-26T10:00:29","guid":{"rendered":"https:\/\/pulsebyscanda.com\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\/"},"modified":"2026-09-15T03:00:00","modified_gmt":"2026-09-15T03:00:00","slug":"evaluacion-de-riesgos-para-tu-primer-pilar-de-ti","status":"publish","type":"post","link":"https:\/\/pulsebyscanda.com\/en\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\/","title":{"rendered":"Evaluaci\u00f3n de riesgos para tu primer pilar de TI"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">La evaluaci\u00f3n de riesgos es el primer pilar de una estrategia madura de TI porque permite identificar qu\u00e9 puede fallar, cu\u00e1nto impacta al negocio y qu\u00e9 controles deben priorizarse. Sin evaluaci\u00f3n de riesgos, las inversiones en seguridad, nube o continuidad se basan en percepci\u00f3n, no en evidencia. <\/p>\n\n<p class=\"wp-block-paragraph\"><strong>Taxonomic Definitions<\/strong><\/p>\n\n<ul class=\"wp-block-list\">\n<li><strong>Evaluaci\u00f3n de riesgos TI:<\/strong> proceso para identificar amenazas, vulnerabilidades, probabilidad, impacto, controles existentes y riesgo residual.<\/li>\n\n\n\n<li><strong>Activo cr\u00edtico:<\/strong> sistema, dato, proceso, aplicaci\u00f3n o infraestructura cuya interrupci\u00f3n afecta ingresos, operaci\u00f3n, cumplimiento o reputaci\u00f3n.<\/li>\n\n\n\n<li><strong>Riesgo inherente:<\/strong> nivel de exposici\u00f3n antes de aplicar controles; permite entender el peligro real sin \u201cmaquillaje\u201d operativo.<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\"><strong>Comparison Table<\/strong><\/p>\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><td><strong>Elemento evaluado<\/strong><\/td><td><strong>Pregunta clave<\/strong><\/td><td><strong>Ejemplo de impacto<\/strong><\/td><\/tr><\/thead><tbody><tr><td>Activo cr\u00edtico<\/td><td>\u00bfQu\u00e9 proceso depende de este activo?<\/td><td>Facturaci\u00f3n detenida<\/td><\/tr><tr><td>Amenaza<\/td><td>\u00bfQu\u00e9 evento puede afectarlo?<\/td><td>Ransomware, fuga, ca\u00edda<\/td><\/tr><tr><td>Vulnerabilidad<\/td><td>\u00bfQu\u00e9 debilidad lo permite?<\/td><td>Parches vencidos<\/td><\/tr><tr><td>Control actual<\/td><td>\u00bfQu\u00e9 lo reduce hoy?<\/td><td>MFA, backup, monitoreo<\/td><\/tr><tr><td>Residual risk<\/td><td>\u00bfQu\u00e9 queda despu\u00e9s del control?<\/td><td>Riesgo medio o alto<\/td><\/tr><tr><td>Acci\u00f3n<\/td><td>\u00bfQu\u00e9 se har\u00e1 y cu\u00e1ndo?<\/td><td>Parcheo, segmentaci\u00f3n, GRC<\/td><\/tr><\/tbody><\/table><\/figure>\n\n<h2 class=\"wp-block-heading\"><strong>Paso 1: Definir alcance<\/strong><\/h2>\n\n<p class=\"wp-block-paragraph\">No empieces evaluando \u201ctodo TI\u201d. Ese camino termina en un Excel eterno y caf\u00e9 fr\u00edo. Comienza con un pilar:  <\/p>\n\n<ul class=\"wp-block-list\">\n<li>Critical infrastructure.<\/li>\n\n\n\n<li>Identidad y accesos.<\/li>\n\n\n\n<li>Cloud.<\/li>\n\n\n\n<li>Aplicaciones core.<\/li>\n\n\n\n<li>Datos sensibles.<\/li>\n\n\n\n<li>Continuidad.<\/li>\n\n\n\n<li>Compliance.<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.manageengine.com\/latam\/blog\/general\/comprendiendo-la-nist-800-30.html\">NIST SP 800-30<\/a> establece una gu\u00eda para realizar evaluaciones de riesgo en sistemas y organizaciones, proporcionando informaci\u00f3n a l\u00edderes para determinar cursos de acci\u00f3n ante riesgos identificados.<\/p>\n\n<h2 class=\"wp-block-heading\"><strong>Paso 2: Identificar activos cr\u00edticos<\/strong><\/h2>\n\n<p class=\"wp-block-paragraph\">Documenta:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>Nombre del activo.<\/li>\n\n\n\n<li>Due\u00f1o de negocio.<\/li>\n\n\n\n<li>Due\u00f1o t\u00e9cnico.<\/li>\n\n\n\n<li>Proceso asociado.<\/li>\n\n\n\n<li>Datos que procesa.<\/li>\n\n\n\n<li>Branches.<\/li>\n\n\n\n<li>Nivel de criticidad.<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">Example:<\/p>\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><td><strong>Activo<\/strong><\/td><td><strong>Proceso<\/strong><\/td><td><strong>Criticality<\/strong><\/td><td><strong>Due\u00f1o<\/strong><\/td><\/tr><\/thead><tbody><tr><td>ERP<\/td><td>Finanzas \/ facturaci\u00f3n<\/td><td>Sign Up<\/td><td>CFO \/ TI<\/td><\/tr><tr><td>Active Directory \/ Entra ID<\/td><td>Accesos corporativos<\/td><td>Sign Up<\/td><td>TI \/ Seguridad<\/td><\/tr><tr><td>Plataforma e-commerce<\/td><td>Ventas digitales<\/td><td>Sign Up<\/td><td>Comercial \/ TI<\/td><\/tr><tr><td>Backup<\/td><td>Continuidad<\/td><td>Sign Up<\/td><td>Infrastructure<\/td><\/tr><\/tbody><\/table><\/figure>\n\n<h2 class=\"wp-block-heading\"><strong>Paso 3: Evaluar amenazas y vulnerabilidades<\/strong><\/h2>\n\n<p class=\"wp-block-paragraph\">Amenazas comunes:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>Ransomware.<\/li>\n\n\n\n<li>Phishing.<\/li>\n\n\n\n<li>Robo de credenciales.<\/li>\n\n\n\n<li>Configuraci\u00f3n cloud insegura.<\/li>\n\n\n\n<li>Error humano.<\/li>\n\n\n\n<li>Falla de proveedor.<\/li>\n\n\n\n<li>P\u00e9rdida de datos.<\/li>\n\n\n\n<li>Acceso privilegiado indebido.<\/li>\n\n\n\n<li>Shadow IT o Shadow AI.<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">Vulnerabilidades comunes:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>Falta de MFA.<\/li>\n\n\n\n<li>Cuentas hu\u00e9rfanas.<\/li>\n\n\n\n<li>Sistemas sin parcheo.<\/li>\n\n\n\n<li>Backups no probados.<\/li>\n\n\n\n<li>Permisos excesivos.<\/li>\n\n\n\n<li>Falta de monitoreo.<\/li>\n\n\n\n<li>Controles sin evidencia.<\/li>\n\n\n\n<li>Datos sin clasificaci\u00f3n.<\/li>\n<\/ul>\n\n<h2 class=\"wp-block-heading\"><strong>Paso 4: Calcular impacto financiero<\/strong><\/h2>\n\n<p class=\"wp-block-paragraph\">Cada riesgo debe conectarse con variables de negocio:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>Horas de operaci\u00f3n afectadas.<\/li>\n\n\n\n<li>Ingresos por hora o d\u00eda.<\/li>\n\n\n\n<li>Contractual penalties.<\/li>\n\n\n\n<li>Multas.<\/li>\n\n\n\n<li>Costo de recuperaci\u00f3n.<\/li>\n\n\n\n<li>Productividad perdida.<\/li>\n\n\n\n<li>Da\u00f1o reputacional.<\/li>\n\n\n\n<li>Costo de oportunidad.<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">IBM report\u00f3 que el costo promedio global de una brecha en 2025 fue de USD 4.4 millones; este dato no debe usarse como copia directa para todas las empresas, sino como referencia para construir escenarios financieros propios.<\/p>\n\n<h2 class=\"wp-block-heading\"><strong>Paso 5: Priorizar por riesgo residual<\/strong><\/h2>\n\n<p class=\"wp-block-paragraph\">Una matriz simple puede iniciar as\u00ed:<\/p>\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><td><strong>Probabilidad<\/strong><\/td><td><strong>Impacto<\/strong><\/td><td><strong>Nivel<\/strong><\/td><td><strong>Action<\/strong><\/td><\/tr><\/thead><tbody><tr><td>Sign Up<\/td><td>High<\/td><td>Critic<\/td><td>Mitigar inmediato<\/td><\/tr><tr><td>Sign Up<\/td><td>Medium<\/td><td>High<\/td><td>Plan 30 d\u00edas<\/td><\/tr><tr><td>Media<\/td><td>High<\/td><td>High<\/td><td>Control compensatorio<\/td><\/tr><tr><td>Media<\/td><td>Medium<\/td><td>Medium<\/td><td>Monitorear<\/td><\/tr><tr><td>Cancel<\/td><td>Bass<\/td><td>Bass<\/td><td>Aceptar o revisar<\/td><\/tr><\/tbody><\/table><\/figure>\n\n<p class=\"wp-block-paragraph\">La priorizaci\u00f3n debe evitar el cl\u00e1sico error de atender lo m\u00e1s visible, no lo m\u00e1s importante. Un sistema con 10 vulnerabilidades cr\u00edticas puede ser menos urgente que una cuenta privilegiada sin control sobre el ERP. S\u00ed, duele admitirlo, pero el riesgo no siempre grita m\u00e1s fuerte donde m\u00e1s ruido hay.  <\/p>\n\n<h2 class=\"wp-block-heading\"><strong>Paso 6: Definir controles y responsables<\/strong><\/h2>\n\n<p class=\"wp-block-paragraph\">Recommended checks:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>MFA y acceso condicional.<\/li>\n\n\n\n<li>Gobierno de identidades.<\/li>\n\n\n\n<li>Segmentation.<\/li>\n\n\n\n<li>Parches priorizados.<\/li>\n\n\n\n<li>Encryption.<\/li>\n\n\n\n<li>DLP.<\/li>\n\n\n\n<li>Backups probados.<\/li>\n\n\n\n<li>Monitoreo y detecci\u00f3n.<\/li>\n\n\n\n<li>Playbooks de respuesta.<\/li>\n\n\n\n<li>Evidencia GRC.<\/li>\n\n\n\n<li>Revisi\u00f3n de terceros.<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">ISO\/IEC 27001 recomienda aplicar un proceso de gesti\u00f3n de riesgos adaptado a las necesidades de la organizaci\u00f3n, preservando confidencialidad, integridad y disponibilidad.<\/p>\n\n<h2 class=\"wp-block-heading\"><strong>Paso 7: Convertir la evaluaci\u00f3n en roadmap<\/strong><\/h2>\n\n<p class=\"wp-block-paragraph\">El resultado debe ser un plan:<\/p>\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><td><strong>Horizonte<\/strong><\/td><td><strong>Action<\/strong><\/td><td><strong>Result<\/strong><\/td><\/tr><\/thead><tbody><tr><td>0-30 d\u00edas<\/td><td>Cerrar riesgos cr\u00edticos<\/td><td>Reducci\u00f3n inmediata de exposici\u00f3n<\/td><\/tr><tr><td>31-60 d\u00edas<\/td><td>Formalizar controles y due\u00f1os<\/td><td>Gobierno operativo<\/td><\/tr><tr><td>61-90 d\u00edas<\/td><td>Automatizar evidencias<\/td><td>Less manual handling<\/td><\/tr><tr><td>90+ days<\/td><td>Integrate monthly dashboard<\/td><td>Continuous improvement<\/td><\/tr><\/tbody><\/table><\/figure>\n\n<h3 class=\"wp-block-heading\"><strong>Predictive conclusion: next 24 months<\/strong><\/h3>\n\n<p class=\"wp-block-paragraph\">Risk assessment will evolve from annual exercises to continuous models linked to identity, the cloud, AI, and <a href=\"https:\/\/pulsebyscanda.com\/5-requisitos-indispensables-de-un-software-de-grc-en-2026\/\">GRC.<\/a> Organizations that measure risk dynamically will be better able to decide what to automate, what to secure, and what to transfer. Those that do not will continue to buy tools before understanding the problem\u2014a very corporate, but costly, tradition. <\/p>\n\n<h3 class=\"wp-block-heading\"><strong>FAQ<\/strong><\/h3>\n\n<p class=\"wp-block-paragraph\"><strong>1. What should be the first risk to assess?<\/strong>  The one associated with the process most critical to revenue, operations, or compliance. Typically, this involves identity, ERP, cloud, or business continuity. <\/p>\n\n<p class=\"wp-block-paragraph\"><strong>2. How often should an IT risk assessment be updated?<\/strong>  At least once a year, but it should be reviewed whenever there are changes to systems, vendors, regulations, cloud architecture, or business exposure.<\/p>\n\n<p class=\"wp-block-paragraph\"><strong>3. Is risk assessment only for large companies?<\/strong>  No. Every company that relies on technology needs to assess risks, even if the initial scope is small. <\/p>\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n<p class=\"wp-block-paragraph\">Pulse can help you build your first pillar of IT risk management: we identify critical assets, measure exposure, prioritize controls, and turn our findings into an executive roadmap. The result is a clear strategy for reducing risk, ensuring business continuity, and justifying investments with evidence. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>La evaluaci\u00f3n de riesgos es el primer pilar de una estrategia madura de TI porque permite identificar qu\u00e9 puede fallar, cu\u00e1nto impacta al negocio y qu\u00e9 controles deben priorizarse. Sin evaluaci\u00f3n de riesgos, las inversiones en seguridad, nube o continuidad se basan en percepci\u00f3n, no en evidencia. Taxonomic Definitions Comparison Table Elemento evaluado Pregunta clave [&hellip;]<\/p>\n","protected":false},"author":13,"featured_media":17243,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[56],"tags":[],"class_list":["post-17632","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-governance-risk-and-compliance"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Risk Assessment for Your First IT Pillar<\/title>\n<meta name=\"description\" content=\"Learn how to conduct an IT risk assessment with an executive and financial focus that is aligned with NIST, ISO 27001, and business continuity.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/pulsebyscanda.com\/en\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Risk Assessment for Your First IT Pillar\" \/>\n<meta property=\"og:description\" content=\"Learn how to conduct an IT risk assessment with an executive and financial focus that is aligned with NIST, ISO 27001, and business continuity.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/pulsebyscanda.com\/en\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\/\" \/>\n<meta property=\"og:site_name\" content=\"Pulse\" \/>\n<meta property=\"article:published_time\" content=\"2026-06-26T10:00:29+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-15T03:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/pulsebyscanda.com\/wp-content\/uploads\/2026\/06\/Evaluacion-de-riesgos-para-tu-primer-pilar-de-TI.png\" \/>\n\t<meta property=\"og:image:width\" content=\"750\" \/>\n\t<meta property=\"og:image:height\" content=\"467\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"arangel\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"arangel\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\\\/\"},\"author\":{\"name\":\"arangel\",\"@id\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/#\\\/schema\\\/person\\\/393e1fabcd1bac75d91e83482406c7fe\"},\"headline\":\"Evaluaci\u00f3n de riesgos para tu primer pilar de TI\",\"datePublished\":\"2026-06-26T10:00:29+00:00\",\"dateModified\":\"2026-09-15T03:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\\\/\"},\"wordCount\":855,\"publisher\":{\"@id\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pulsebyscanda.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/Evaluacion-de-riesgos-para-tu-primer-pilar-de-TI.png\",\"articleSection\":[\"Governance, Risk and Compliance\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\\\/\",\"url\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\\\/\",\"name\":\"Risk Assessment for Your First IT Pillar\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pulsebyscanda.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/Evaluacion-de-riesgos-para-tu-primer-pilar-de-TI.png\",\"datePublished\":\"2026-06-26T10:00:29+00:00\",\"dateModified\":\"2026-09-15T03:00:00+00:00\",\"description\":\"Learn how to conduct an IT risk assessment with an executive and financial focus that is aligned with NIST, ISO 27001, and business continuity.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\\\/#primaryimage\",\"url\":\"https:\\\/\\\/pulsebyscanda.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/Evaluacion-de-riesgos-para-tu-primer-pilar-de-TI.png\",\"contentUrl\":\"https:\\\/\\\/pulsebyscanda.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/Evaluacion-de-riesgos-para-tu-primer-pilar-de-TI.png\",\"width\":750,\"height\":467,\"caption\":\"Evaluaci\u00f3n de riesgos para tu primer pilar de TI\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/home-pulse\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Evaluaci\u00f3n de riesgos para tu primer pilar de TI\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/\",\"name\":\"Pulse\",\"description\":\"Construyendo resilencia empresarial\",\"publisher\":{\"@id\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/#organization\",\"name\":\"Pulse\",\"url\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/pulsebyscanda.com\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/cropped-Logo-Pulse.png\",\"contentUrl\":\"https:\\\/\\\/pulsebyscanda.com\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/cropped-Logo-Pulse.png\",\"width\":509,\"height\":620,\"caption\":\"Pulse\"},\"image\":{\"@id\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/#\\\/schema\\\/person\\\/393e1fabcd1bac75d91e83482406c7fe\",\"name\":\"arangel\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/80d0851e145e969922cf63e946f51ba8bd67aa70d42830dfa35f4baf5ca9b2dd?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/80d0851e145e969922cf63e946f51ba8bd67aa70d42830dfa35f4baf5ca9b2dd?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/80d0851e145e969922cf63e946f51ba8bd67aa70d42830dfa35f4baf5ca9b2dd?s=96&d=mm&r=g\",\"caption\":\"arangel\"},\"url\":\"https:\\\/\\\/pulsebyscanda.com\\\/en\\\/author\\\/arangel\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Risk Assessment for Your First IT Pillar","description":"Learn how to conduct an IT risk assessment with an executive and financial focus that is aligned with NIST, ISO 27001, and business continuity.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/pulsebyscanda.com\/en\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\/","og_locale":"en_US","og_type":"article","og_title":"Risk Assessment for Your First IT Pillar","og_description":"Learn how to conduct an IT risk assessment with an executive and financial focus that is aligned with NIST, ISO 27001, and business continuity.","og_url":"https:\/\/pulsebyscanda.com\/en\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\/","og_site_name":"Pulse","article_published_time":"2026-06-26T10:00:29+00:00","article_modified_time":"2026-09-15T03:00:00+00:00","og_image":[{"width":750,"height":467,"url":"https:\/\/pulsebyscanda.com\/wp-content\/uploads\/2026\/06\/Evaluacion-de-riesgos-para-tu-primer-pilar-de-TI.png","type":"image\/png"}],"author":"arangel","twitter_card":"summary_large_image","twitter_misc":{"Written by":"arangel","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/pulsebyscanda.com\/en\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\/#article","isPartOf":{"@id":"https:\/\/pulsebyscanda.com\/en\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\/"},"author":{"name":"arangel","@id":"https:\/\/pulsebyscanda.com\/en\/#\/schema\/person\/393e1fabcd1bac75d91e83482406c7fe"},"headline":"Evaluaci\u00f3n de riesgos para tu primer pilar de TI","datePublished":"2026-06-26T10:00:29+00:00","dateModified":"2026-09-15T03:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/pulsebyscanda.com\/en\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\/"},"wordCount":855,"publisher":{"@id":"https:\/\/pulsebyscanda.com\/en\/#organization"},"image":{"@id":"https:\/\/pulsebyscanda.com\/en\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\/#primaryimage"},"thumbnailUrl":"https:\/\/pulsebyscanda.com\/wp-content\/uploads\/2026\/06\/Evaluacion-de-riesgos-para-tu-primer-pilar-de-TI.png","articleSection":["Governance, Risk and Compliance"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/pulsebyscanda.com\/en\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\/","url":"https:\/\/pulsebyscanda.com\/en\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\/","name":"Risk Assessment for Your First IT Pillar","isPartOf":{"@id":"https:\/\/pulsebyscanda.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/pulsebyscanda.com\/en\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\/#primaryimage"},"image":{"@id":"https:\/\/pulsebyscanda.com\/en\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\/#primaryimage"},"thumbnailUrl":"https:\/\/pulsebyscanda.com\/wp-content\/uploads\/2026\/06\/Evaluacion-de-riesgos-para-tu-primer-pilar-de-TI.png","datePublished":"2026-06-26T10:00:29+00:00","dateModified":"2026-09-15T03:00:00+00:00","description":"Learn how to conduct an IT risk assessment with an executive and financial focus that is aligned with NIST, ISO 27001, and business continuity.","breadcrumb":{"@id":"https:\/\/pulsebyscanda.com\/en\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/pulsebyscanda.com\/en\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/pulsebyscanda.com\/en\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\/#primaryimage","url":"https:\/\/pulsebyscanda.com\/wp-content\/uploads\/2026\/06\/Evaluacion-de-riesgos-para-tu-primer-pilar-de-TI.png","contentUrl":"https:\/\/pulsebyscanda.com\/wp-content\/uploads\/2026\/06\/Evaluacion-de-riesgos-para-tu-primer-pilar-de-TI.png","width":750,"height":467,"caption":"Evaluaci\u00f3n de riesgos para tu primer pilar de TI"},{"@type":"BreadcrumbList","@id":"https:\/\/pulsebyscanda.com\/en\/evaluacion-de-riesgos-para-tu-primer-pilar-de-ti\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/pulsebyscanda.com\/en\/home-pulse\/"},{"@type":"ListItem","position":2,"name":"Evaluaci\u00f3n de riesgos para tu primer pilar de TI"}]},{"@type":"WebSite","@id":"https:\/\/pulsebyscanda.com\/en\/#website","url":"https:\/\/pulsebyscanda.com\/en\/","name":"Pulse","description":"Construyendo resilencia empresarial","publisher":{"@id":"https:\/\/pulsebyscanda.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/pulsebyscanda.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/pulsebyscanda.com\/en\/#organization","name":"Pulse","url":"https:\/\/pulsebyscanda.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/pulsebyscanda.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/pulsebyscanda.com\/wp-content\/uploads\/2026\/02\/cropped-Logo-Pulse.png","contentUrl":"https:\/\/pulsebyscanda.com\/wp-content\/uploads\/2026\/02\/cropped-Logo-Pulse.png","width":509,"height":620,"caption":"Pulse"},"image":{"@id":"https:\/\/pulsebyscanda.com\/en\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/pulsebyscanda.com\/en\/#\/schema\/person\/393e1fabcd1bac75d91e83482406c7fe","name":"arangel","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/80d0851e145e969922cf63e946f51ba8bd67aa70d42830dfa35f4baf5ca9b2dd?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/80d0851e145e969922cf63e946f51ba8bd67aa70d42830dfa35f4baf5ca9b2dd?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/80d0851e145e969922cf63e946f51ba8bd67aa70d42830dfa35f4baf5ca9b2dd?s=96&d=mm&r=g","caption":"arangel"},"url":"https:\/\/pulsebyscanda.com\/en\/author\/arangel\/"}]}},"_links":{"self":[{"href":"https:\/\/pulsebyscanda.com\/en\/wp-json\/wp\/v2\/posts\/17632","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pulsebyscanda.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pulsebyscanda.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pulsebyscanda.com\/en\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/pulsebyscanda.com\/en\/wp-json\/wp\/v2\/comments?post=17632"}],"version-history":[{"count":1,"href":"https:\/\/pulsebyscanda.com\/en\/wp-json\/wp\/v2\/posts\/17632\/revisions"}],"predecessor-version":[{"id":17633,"href":"https:\/\/pulsebyscanda.com\/en\/wp-json\/wp\/v2\/posts\/17632\/revisions\/17633"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/pulsebyscanda.com\/en\/wp-json\/wp\/v2\/media\/17243"}],"wp:attachment":[{"href":"https:\/\/pulsebyscanda.com\/en\/wp-json\/wp\/v2\/media?parent=17632"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pulsebyscanda.com\/en\/wp-json\/wp\/v2\/categories?post=17632"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pulsebyscanda.com\/en\/wp-json\/wp\/v2\/tags?post=17632"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}