Diseño de un sistema de seguridad de la información para la Compañía Acotecnic Cía. Ltda. basado en la norma NTE INEN ISO/IEC 27002

Abstract

Being a valuable benefit for business, the information, must be properly protected through security politics that lend us an appropriate management of information security. A correct administration of the Information and Communication Technologies (ICT), a culture of ethicsin the management and care of the information, and a correct model of administration, based in clear objectives and the current legislation, may protect the interest of the company, ensuring the continuity of this business.

Setting off the need to determinate the feasibility of implementing an information security system, in small companies, the current thesis project proposes analyzing the condition of a local company dedicated to offer professional services in the technical consultancy area, and with these results, establish a schema that can be followed to implement, improve and maintain an optimal security management system, in accordance to the requirements and investment that it can provide.

An analysis based on the best practices recommended by the policy NTE INEM ISO/IEC 27002 is made, in every single area of the ICT that the company possesses for the development of their daily activities.