Creación, Implementación y Evaluación de la Política de Seguridad de Base de Datos Para los Ambientes de Producción del Instituto Colombiano Para la Evaluación de la Educación "ICFES"

Abstract

This document presents an overview of the activities in the project for the creation, implementation and evaluation of the security policy database for production environments of the Colombian Institute for Educational Evaluation "ICFES". This project was based on a PDCA cycle life [1]. the activities for each of the stages are as follows: Planning: Defining the scope and objectives of the policy Do: Rising inventory of the infrastructure that supports the production database. Analysis of risks, threats and vulnerabilities. Establishing controls to mitigate the risk threats and vulnerabilities. Check: Establishment of measuring the effectiveness of controls. Establishment of procedures and standards that support the policy. Developing an audit plan. Acting: Refining the politics definition. Campaign of policy disclosure.