Formulación sistema de gestión de la seguridad de la información Sgsi en empresas dedicadas a la consultoría y el levantamiento de información

Abstract

The purpose of this paper is to model an information security management system (ISMS) for companies dedicated to the consulting and information gathering sector, which can be adapted and applied in these organizations, since these are strongly demarcated within the fields of information technology (IT). Hence the concern of the authors with regard to the sensitivity of the information treated that sometimes does not seem to be a priority for this type of company given the implementation costs that this may entail, for this reason, the aim of this work is to capture an accessible model that allows easy implementation once organizational awareness is made in this matter and thus reduce the risk to which they are exposed.