Diseño de procedimientos de gestión de usuarios y gestión del cambio en el sistema Kactus-Hr aplicando ISO 27001

Abstract

Taking as reference the National Learning Service - SENA, given the implementation of the KACTUS-HR system in 1999, reviewing the current processes, the system presents the strategic ally when carrying out processes such as payroll settlement, social security and parafiscal contributions, taking this into account, it is necessary to consider in a document the design of user management and change management of the information system due to technological evolution and administrative movements in the salary administration group (functional area), and the group of information systems management (technical area) according to the organization chart of the entity, applying ISO 27001. ISO 27001 describes how to manage the assurance, confidentiality and integration of data and information that is processed in information systems; the definition of the norm as “Information security management system” allows to carry out a risk assessment and from there, establish controls to mitigate or possibly eliminate them. Through documents with procedures and formats, the organization and awareness of the appropriate, hierarchical and organized use of the specific steps for user administration and change management in the KACTUS-HR system are expected, which allows compliance in these activities.