Importancia de la ISO 27001 en las Pymes de Guayaquil: caso de estudio Transnave

Abstract

In recent years, with the comprehensive adaptation of information technology (IT), ithe security of the information has become a fundamental issue in business management. Various information management, security standards and guidelines have been developed, such as ISO / IEC 27001, ISO, COBIT, ITIL but companies still face obstacles in the implementation process. This paper presents the current state of the implementation process of the ISO / IEC 27001 standard in public management entities and companies; In order to study a company with a paradigm other than the commercialization of products, the implementation process of a company located in Guayaquil dedicated to providing shipping service was analyzed; Currently, there are many ways to implement the Information Security Management System (ISMS) in small and medium-sized companies based on the Cycle of continuous improvement. Finally, some aspects to consider to implement an ISMS in SMEs will be proposed. In this article, through qualitative research, he has studied the way in which SMEs face information security and identify their main obstacles when implementing an information security management system (ISMS) in the entity.