Diagnóstico y gestión de riesgos de los activos de información dentro de la secretaría de seguridad operacional y de la aviación civil de la aeronáutica civil

Abstract

In this project, has been made the diagnosis and risk management of information assets in the secretariat of operational safety and civil aviation of civil aviation; This diagnosis and its subsequent risk management was carried out taking into account the ISO / IEC 27000 series of standards, more precisely ISO 27001, ISO 27002 and ISO 27005, among other applicable regulations according to the entity. As a final result of the project two matrices are obtained, the first one called inventory of information assets with which it was possible to carry out the diagnosis of them and a second matrix where the risk management that was carried out for the assets is contained whose criticality was high.