Sistema de gestión para la protección de datos críticos de una empresa de transporte pesado

Abstract

This study proposes a management system for the protection of critical data in a heavy transport companies, the objective is to strengthen the integrity, confidentiality and availability of information adapted to the needs of the sector. The MAGERIT methodology was used, which provides a structured framework to identify and manage information security risks. In addition, the requirements established by the Organic Law of Protection of Personal Data were considered, 1 Estudiante de Ingeniería en Ciencias de la Computación - Universidad Politécnica Salesiana, Egresado - UPS - sede Quito. Autor para correspondencia: rcamachoc@est.ups.edu.ec 2 Magister en Redes de Comunicaciones, Ingeniero en Electrónica y Telecomunicaciones, Profesor de Ingeniería en Sistemas y Computación - UPS - sede Quito. Email: aguayo@ups.edu.ec too. The proposed system answers the main security threats, including risk analysis and adequate protection of information assets. The implementation of a security policy will improve the protection of critical data. Training is recommended about this policy, besides, it will be subject to periodic review, and improvement to adapt to the new threats and challenges of the evolving technological environment. In conclusion, this study shows that the implementation of the MAGERIT methodology with technology tools will make it possible to identify and manage risks effectively, establishing adequate controls and procedures. Its application in other organizations is recommended, providing a comprehensive and robust approach to protect information and maintain the trust of interested parties. The maintaining an information security policy in constant review, and improvement to adapt to changes in the environment and get a better protection of company assets is importants.