Diseño de un Sistema de Gestión de Seguridad de la Información orientado a organizaciones que prestan servicios de tecnologías de la información (IT)

Abstract

The information with processes that make use of the information, are very important assets within the organization, so there must be parameters to consider such as: confidentiality, integrity and availability of information in order to have a levels of competitiveness, profitability, compliance and corporate image enough to achieve the objectives of the entity. It is considered important to deploy the update of the ISMS as daily information systems are exposed to threats exploiting any of the vulnerabilities may be subjected to critical information assets to various forms of fraud, espionage, sabotage or vandalism that leads to no good companies which are not governed under a safety standard. Therefore, monitoring and control of information security, as is the area of security and other areas should establish one administrative information security levels that can generate at most 100% of the assets of an enterprise.