Análisis de riesgos de seguridad de la información en el proceso de contratación de personal en una institución de educación superior en Ecuador, basado en la norma ISO 27002 anexo a dominio 7

Abstract

The process of hiring personnel for an institution or organization today is very important, because during this procedure it will be possible to know skills, capabilities and abilities, in order to understand whether a third person can contribute positively to an entity; considering in this case that the hired persons ensure information security by being instructed on their functions before, during and after the change or termination of the job. Prior to the application of the instrument for data collection, a bibliographic review is made on information security considering ISO 27002, then the triad of information security is conceptualized, ISO 27001/27002 and Annex A domain 7. In this research a quantitative methodology was used to analyze the risk of information security in the hiring process. The results obtained show that the analysis of the ISO 27002 controls allows to know in which situation the company is and which ones are at risk, that is, which ones should be improved to reach the optimum level, thus safeguarding the information security during the whole contracting process.