Aplicativo para la gestión de incidentes de seguridad de la información en aplicaciones, basado en la NTC-ISO/IEC 27002-27035. Para el caso de uso de la Universidad Distrital

Abstract

The IXION-UD Manager application management Incident Information Security according to ISO 27035 for Web Applications of the University Francisco José de Caldas, allow the advisory office of the University System (OAS) Maintain UN Process Attention, tracking and resolution of reported incidents that reveal vulnerabilities in which UN System Risk implications for active information handled by the university. To design the application Indications regulations that indicates the family of standards ISO 27000 for Information Security, with special emphasis on the ISO 27035 and 27002 as standard treatment for Incident Management and evaluation of controls were followed Security respectively.