Manual de políticas de seguridad de la información basado en la norma ISO 27001 en el GAD intercultural de el Tambo.

Abstract

ABSTRACT

The Intercultural Decentralized Autonomous Municipal Government from El Tambo (GADMIET by its acronym in Spanish) has been developing different procedures throughout its territory to provide its citizens with services that improve their quality of life. The lack of information about security standards in the GADMIET makes the information handled within the organization vulnerable to manipulation. Therefore, this research aims at designing a manual of information security policies based on the ISO 27001 standard in the GADMIET from El Tambo. Thus, to efficiently develop this thesis work, the ISO standard is taken as a basis for the 27001: 2013 and the ISO 27002 good practice guide, to determine the controls that allow the assurance of the information. Accordingly, a survey was applied to the IT manager to determine the current situation of the organization. Additionally, the survey of assets of the department of Information and Communication Technologies (ICT) and the respective qualification. The level of risk was determined based on the threats of the aforementioned assets and the pertinent controls were established, obtaining, as a result, the policy manual for the intercultural GAD from El Tambo.

Keywords: ISO 27001 standard, controls, risk management, ICT, GADMIET