Propuesta de manual de políticas de seguridad de la información para la Cooperativa de Chunchi, del cantón Chunchi, bajo la norma ISO 27001

Abstract

This thesis presents the development of an Information Security Policy Manual for the Chunchi Savings and Credit Cooperative based on the ISO/IEC 27001:2013 standard. The project aims to address the lack of formalized security policies, which presents significant risks to the cooperative's sensitive information. This study identifies critical vulnerabilities and gaps by evaluating the current state of the cooperative's information security through surveys and risk analysis. Using the MAGERIT methodology, assets, threats, and vulnerabilities were analyzed to develop customized policies that ensure the information confidentiality, integrity, and availability. The proposed manual aligns with ISO 27001 standards, focusing on strengthening security practices, improving regulatory compliance, and fostering a security-oriented organizational culture. This work contributes to safeguarding sensitive data and improving the operational resilience and reputation of the cooperative. Keywords: information security, ISO 27001, security policy manual.