Guía de seguridad de la información basada en la norma ISO 27001 y el estándar NIST-IR 7621 revisión 1 del National Institute Of Standards And Technology para pymes, con diseño de políticas para la empresa profesionales Asociados Ltda.

Abstract

This document gives an account of an investigative process, through which it is intended to make an intervention proposal for the company Profesionales Asociados LTDA; this process is based on the need to strengthen the information security processes carried out in PYMES (micro, small and medium enterprises), which, based on the observations made, showed some shortcomings related to the little or no investment that said companies perform for the protection of your information. This is how the main objective of this monograph is proposed, which seeks to develop a reference document for SMEs, based on information security fundamentals delivered by the NIST (National Institute of Standards and Technology of the United States) and the ISO 27001 standard.