Modelo de un sistema de Gestión de la Seguridad de la Información aplicada a entidades bancarias

Abstract

At present, many companies that are or wish to enter the financial sphere have problems to safeguard the security of the information, in consequence it generates vulnerabilities and threats of the assets of the organization. The globalization and liberation of the financial sector, together with the growing sophistication of financial technology, and deliberate access to information, are making the activities of financial institutions increasingly diverse and complex in terms of security. The purpose of this work was to design the information management system (ISMS), based on the ISO27001 standard. This paper describes how to create a security plan for a financial institution, start with defining its organizational structure, evaluate each of its assets, then go on to define the threats and risks that can be generated, to finally conclude With previously defined policies in order to mitigate risks that may arise within a financial institution.