Document type
Bachelor thesisPublication date
Publication license
Please use this identifier to cite or link to this item: https://hdl.handle.net/2445/223771
Metodología para Aplicación del ENS 2022 Nivel ALTO en PYMES
Journal Title
Authors
Director/Tutor
Journal ISSN
Volume Title
Related resource
Abstract
La adopción del ENS 2022 en su nivel Alto exige a las PYMEs implantar numerosas medidas de seguridad, lo cual suele resultar costoso y complejo dada su falta de personal especializado y recursos limitados. Este Trabajo de Fin de Grado presenta una metodología asistida por software, implementada en una plataforma Dockerizada, que guía a las empresas a lo largo de todo el proceso de adecuación. La solución integra ocho scripts que
cubren fases clave: evaluación inicial de cumplimiento, generación de diagnóstico con recomendaciones, creación de políticas de seguridad, auditoría de permisos, monitorización de incidentes, simulación de ataques, optimización de recursos y elaboración de informes ejecutivos. Cada script automatiza tareas que, de otro modo, requerirían horas de trabajo manual. La plataforma se validó en un entorno de laboratorio Windows / Linux, demostrando que es posible automatizar gran parte de los controles programables, reducir significativamente el esfuerzo operativo y generar la documentación necesaria para auditorías de conformidad.
Implementing ENS 2022 at the High level requires SMEs to adopt numerous security measures, a task that is often costly and complex due to limited specialized staff and resources. This Final Degree Project introduces a software-assisted methodology, delivered through a containerized platform, that guides organizations through the entire compliance process. The solution integrates eight scripts covering key stages: initial compliance assessment, diagnostic report generation with recommendations, security policy creation, permissions auditing, incident monitoring, attack simulation, resource optimization, and executive report production. Each script automates tasks that would otherwise demand extensive manual effort. The platform was validated in a Windows / Linux laboratory environment, demonstrating the ability to automate the majority of programmable controls, significantly reduce operational workload, and generate audit-ready documentation.
Implementing ENS 2022 at the High level requires SMEs to adopt numerous security measures, a task that is often costly and complex due to limited specialized staff and resources. This Final Degree Project introduces a software-assisted methodology, delivered through a containerized platform, that guides organizations through the entire compliance process. The solution integrates eight scripts covering key stages: initial compliance assessment, diagnostic report generation with recommendations, security policy creation, permissions auditing, incident monitoring, attack simulation, resource optimization, and executive report production. Each script automates tasks that would otherwise demand extensive manual effort. The platform was validated in a Windows / Linux laboratory environment, demonstrating the ability to automate the majority of programmable controls, significantly reduce operational workload, and generate audit-ready documentation.
Description
Treballs Finals de Grau d'Enginyeria Informàtica, Facultat de Matemàtiques, Universitat de Barcelona, Any: 2025, Director: Raúl Roca Cánovas
Subject (English)
Citation
Citation
GONZÁLEZ BRAZA, Daniel. Metodología para Aplicación del ENS 2022 Nivel ALTO en PYMES. [consulted: 8 of August of 2026]. Available at: https://hdl.handle.net/2445/223771