Diseño de un modelo de seguridad de la información para proyectos de investigación en el área medioambiental

Abstract

This document presents a conceptual design proposal for an information security model applied to environmental research projects. The initiative arises from the need to address the operational and regulatory particularities of these environments, where sensitive, distributed data are managed and subject to specific risks. The proposed model is structured according to the PDCA cycle (Plan, Do, Check, Act). It integrates guidelines from international standards such as ISO/IEC 27001:2022, ISO/IEC 27002:2022, ISO/IEC 27005:2022, MAGERIT v3, and NIST SP 800-53 Rev. 5. This normative foundation enables a systematic approach to the identification, analysis, and treatment of risks, aligned with research objectives and the technical conditions of the environment. The design includes policies, practices, and controls organized by function (preventive, detective, corrective, and deterrent), classified according to the risk level of the assets and their technological maturity. In addition, it incorporates segmentation, traceability, and documentation mechanisms that support its application in institutional contexts or scientific research programs. The result is a comprehensive conceptual model that, by aligning regulatory frameworks with sector-specific characteristics, serves as a strategic guide to strengthen the protection of critical assets and enhance operational resilience in environmental research projects.