Gestión y técnicas en la manipulación de datos para el área de seguridad de la información: una revisión sistemática

Abstract

There are risks, vulnerabilities and potential threats that affect the confidentiality, availability and integrity of sensitive data. To protect IT infrastructures and data, companies increase their security measures based on a combination of people-process-technology. Security of Information (SeIn) is an important component in IT, and refers to information that is captured, stored, processed and shared through a network or people or devices. There are regulations and standards to comply with privacy and information security laws in different countries. One of the standards is ISO 27001 applies to both private and public, small, medium and large companies. Professional management of information assets is essential to prevent, foresee and recognize risks and threats to SeIn. To evaluate data management and manipulation techniques, a systematic review was conducted using the PRISMA method consisting of: initiating the research, research questions, conducting the search, selecting articles, extracting data and reporting. In this way, 21 articles taken from IEEE and ACM were reviewed. The results showed that manipulation of files and physical devices are the most common data manipulation techniques. The most named storage practice is installing cybersecurity applications. The most frequent risk is cybersecurity threat. PDCA is the most applied/referenced methodology. Vulnerability analysis systems are the most used. The use of regulations or standards such as ISO 27001 in its different versions that are adopted in different national contexts and companies or organizations is highlighted. Although the standard is an international guide, it has its own preferred methodology, which is PDCA. The findings suggest that companies implement various security measures and there is a need for comprehensive approaches to risk management.