Over the years, it has been observed that most companies have the need to use and implement computer systems as a technology framed in the commercial activities they carry out, in this way computer systems can be adjusted to the need that the company require. A computer system is the set of interrelated parts such as hardware, software and the part of human resources that allows the storage and processing of information, a computer system. To carry out the analysis of the vulnerabilities of the computer system, the OCTAVE-S methodology was used, where through worksheets the necessary information could be obtained to know the risks to which they are vulnerable, therefore it could be deduced that the OCTAVE method -S adapts to the risk environment of the company, which focuses on knowing the vulnerabilities that arise in the computer system, but this methodology focuses more on people and the physical part, this methodology is made up of three phases, each phase has processes and within each process activities are developed. Currently, having a web computer system is very common and essential within all companies and institutions, whether public or private, in such a way that it helps them to streamline the processes of each of their departments, it also saves time and provides better service. to the citizenry and consume less resources than desktops. To analyze the system called Webconta, the NMAP tool was used, in which it was possible to know the ports that are open and the ones that are vulnerable to some type of problem.Over the years, it has been observed that most companies have the need to use and implement computer systems as a technology framed in the commercial activities they carry out, in this way computer systems can be adjusted to the need that the company require. A computer system is the set of interrelated parts such as hardware, software and the part of human resources that allows the storage and processing of information, a computer system. To carry out the analysis of the vulnerabilities of the computer system, the OCTAVE-S methodology was used, where through worksheets the necessary information could be obtained to know the risks to which they are vulnerable, therefore it could be deduced that the OCTAVE method -S adapts to the risk environment of the company, which focuses on knowing the vulnerabilities that arise in the computer system, but this methodology focuses more on people and the physical part, this methodology is made up of three phases, each phase has processes and within each process activities are developed. Currently, having a web computer system is very common and essential within all companies and institutions, whether public or private, in such a way that it helps them to streamline the processes of each of their departments, it also saves time and provides better service. to the citizenry and consume less resources than desktops. To analyze the system called Webconta, the NMAP tool was used, in which it was possible to know the ports that are open and the ones that are vulnerable to some type of problem.En el transcurso de los años se ha venido observando que la mayoría de las empresas tienen la necesidad de utilizar e implementar sistemas informáticos como una tecnología enmarcada en las actividades comerciales que desempeñan, de esta manera los sistemas informáticos se puede ajustar a la necesidad que la empresa requiera. Un sistema informático es el conjunto de partes interrelacionada como hardware, software y la parte de los recursos humanos que permite almacenar y procesar información, un sistema informático. Para la realización del análisis de las vulnerabilidades del sistema informático se utilizo la metodología OCTAVE-S en donde mediante hojas de trabajo se pudo obtener la información necesaria para conocer los riesgos a los que son vulnerables, por lo tanto se pudo deducir que el método OCTAVE-S se adapta al entorno de riesgo de la empresa, el cual se centra en conocer las vulnerabilidades que se presentan en el sistema informático, pero esta metodología se enfoca mas en las personas y la parte física, esta metodología está compuesta de tres fases, cada fase tiene procesos y dentro de cada proceso se desarrollan actividades. Actualmente poseer un sistema informático web es algo muy común y esencia dentro de todas las empresas e instituciones ya sean públicas o privadas de tal manera que les ayuda en agilitar los procesos de cada uno de sus departamentos asimismo le ahorra tiempo y se da un mejor servicio a la ciudadanía y consumen menos recurso que los de escritorio. Para analizar el sistema llamado Webconta se utilizo la herramienta NMAP en la cual se pudo conocer los puerto q están abierto y los mismo que son vulnerables a dufrir algún tipo de problemas.