Publication: Adaptación de una empresa tecnológica a UNE-ISO/IEC 27001 (versión 2013)
Loading...
Identifiers
Publication date
2015-10
Defense date
2015-10-15
Authors
Advisors
Tutors
Journal Title
Journal ISSN
Volume Title
Publisher
Impact
Export
Abstract
En la primera parte de este trabajo se detalla la introducción y los objetivos del proyecto. También se ahonda en las bases de lo que es un Sistema de Gestión de la Seguridad de la Información, lo que representa, que objetivos, recomendaciones y requerimientos son necesarios tener definidos, así como algunos ejemplos de políticas de seguridad. Se expone el sistema CIA y su importancia en un SGSI. Todos estos conceptos, se completan con una breve descripción de algunas de las normas internacionales ISO más representativas, haciendo especial énfasis en la norma 27001, que es la base del proyecto.
Para la segunda parte y como centro del proyecto, se ha creado una guía que puede servir de referencia a una empresa que desee certificarse en la norma ISO 27001, ya que se ha desarrollado un manual de seguridad siguiendo la estructura de la norma 27001:2013, en la que se describe, punto por punto, todos los requisitos que impone dicha norma, así como todos los registros y documentos que hay que crear para poder obtener la certificación.
On the first part of the Project it is detailed the abstract, and purpose of it. It also deepens on the fundamentals of what an ISMS is, what it represents and the goals, recommendations, and requirements that must be defined as well as security policies that are implied. It is explained the CIA system, and it´s importance on a ISMS. All these concepts are completed with some short descriptions on some of the most relevant international ISO Standards focusing on the 27001 Standard, which is the core of the project. For the second part and as the center of the Project it has been created a manual that may be used as a handbook for an enterprise that is willing to get certified on the ISO 27001, given that it has been created following the 27001:2013 guidelines. The final result is a guide that will serve as complete assistance to get all the registries, tasks and requirements that getting certified demands.
On the first part of the Project it is detailed the abstract, and purpose of it. It also deepens on the fundamentals of what an ISMS is, what it represents and the goals, recommendations, and requirements that must be defined as well as security policies that are implied. It is explained the CIA system, and it´s importance on a ISMS. All these concepts are completed with some short descriptions on some of the most relevant international ISO Standards focusing on the 27001 Standard, which is the core of the project. For the second part and as the center of the Project it has been created a manual that may be used as a handbook for an enterprise that is willing to get certified on the ISO 27001, given that it has been created following the 27001:2013 guidelines. The final result is a guide that will serve as complete assistance to get all the registries, tasks and requirements that getting certified demands.
Description
Keywords
Sistema de Gestión de la Seguridad de la Información (SGSI), Certificación, Auditoría informática, Protección de datos