Efectos de la implementación de una auditoría informática a las empresas de seguros a través de la ISO 27001 :2013 ubicadas en el Norte del DMQ.

Abstract

The aim of this article of theoretical nature is to show the effects of the implementation of a computer audit on insurance companies located in the northern part of Quito, through the standard granted by the International Organization for Standardization ISO 27001:2013 providing the variations in the insurance organizations which has a formal form of compliance in the protection of information as well as an improvement in financial, operational, management level processes focusing on the internal control process in the comprehensive development of the Information Security Management System (ISMS) and its variables in design, through future projections for performance improvement by using a computer software that can assess projections based on historical values .Additionally, it also complements the hypothesis in deduction of positive effects that have been found in this study. Through both deductive and statistical analysis, the theory of management systems will be explored. This theory is directly related to benefits of Information and Communication Technologies (ICT), which in turn they are linked to the performance of the organization that is vital for the conservation of investment in technological assets. Consequently, presenting precedents such as technology investment followed by its control is a crucial part. With which it is demonstrated that implementing an IT audit through an ISO, which is an international certification, not only provides guidelines, but also benefits in the reduction of the risk points which will be mitigated by the added value of ISO 27001:2013 certification.