Propuesta de diseño de un sistema de gestión de seguridad de la información para las áreas de educación y protección social de la Fundación Tierra Nueva con base en la Norma ISO/IEC 27001:2013

Abstract

Nowadays, the world of technology and information involves many challenges to companies in the face of threats and risks that infringe the integrity, availability and confidentiality of information, since they can seriously affect the normal operations of organizations. That is why this degree project proposes the design of an Information Security Management System for the areas of Education and Social Protection of the FTN, whose main focus is to protect the information assets of the FTN, with regard to the aforementioned areas and based on the international standard of ISO/IEC 27001:2013. The ISO/IEC 27001:2013 standard served as a guide for this project since it allowed its development according to the guidelines established in the controls of Annex A, i.e. a diagnosis was made to understand the current state in which the FTN was, using instruments such as questionnaires, interviews, which allowed to identify which domains comply and do not comply and as a result of them we proceeded with the risk analysis of information security and the proposal for the design of an ISMS. With the completion of this degree project, an ISMS proposal was made for the Education and Social Protection areas of the FTN, which contains policies for each domain and controls that must be implemented to protect both its information assets and its IT assets.