Implementación de un Modelo de Seguridad Informática en un Sistema de Monitoreo para los Canales de Comunicaciones y Datacenter en la Empresa Atento SA

Abstract

In this project the creation of a security policy in order to establish measures for the protection of information in the company Atento SA was made. Throughout the development of the project analysis of IT assets vs safety data were performed. First the risk analysis, where assets and the value thereof, identifying threats, the impact assessment and classification of risks that could cause such threats were identified was performed. Then the treatment of risks, where existing security controls in the company by reference to the ISO / IEC 27001 was identified was conducted: 2013, since it is objective Atento SA certified in this standard, the current situation was identified and security breaches. With the research process within the company they managed to obtain all the necessary data to make way for the design of the security policy and set the deployment model that was referred to the safety committee Atento SA for its respective review and approval. As a next step the design of connection between both external and internal networks of the company and finally the implementation of a security tool to apply the appropriate security measures was made was made.