Sistema de gestión de seguridad de la información (SGSI) aplicada al área de operaciones de una Empresa de Telecomunicaciones.

Abstract

Telecommunications companies provide different services such as telephony, cable television, internet among others, these companies are responsible for renewing and updating the technology provided to their customers, offering different services has a large amount of information which is vulnerable to Theft, and inconsistency in the management of infrastructure data, In 2016 it is evident during a study conducted by IBM security that companies in the telecommunications sector do not have control over the protection of information and the assets that interact with the operation, therefore, the development of a manual of security policies for identified vulnerabilities and risks will be carried out, where the necessary controls will be defined to mitigate the risks and vulnerabilities already mentioned. Also, a tool will be made to monitor and inform the manager of the affected areas and the quality personnel in charge on the status of the defined controls all this for the area of ​​operations of telecommunications companies. The aforementioned project was estimated with a projective research based on the magerit methodology and the cobit framework for the mitigation of risks, vulnerabilities and threats that were identified in the project.