Sistema de gestion de indicadores para la maestría en gestión de la seguridad de la información (udguard)

Abstract

The Master’s program in Information Security Management at Universidad Distrital required a reliable, traceable mechanism for high-quality accreditation self-assessment (CNA). This work introduces UdGuard, an indicators-and-evidence management system that embeds the CNA hierarchical model (factors→characteristics→aspects), automates calculations, centralizes evidence, and delivers monitoring dashboards. The study followed a mixed approach combining applied research and agile development (Scrum), including semi-structured interviews (with Professor Manuel), documentary analysis, and iterative prototyping. The architecture (MVC + REST API) and data model enable configurable calculation rules, evidence versioning, and full change traceability. In pilots with representative datasets, UdGuard reduced consolidation time by ~62%, decreased data-inconsistency incidents by ~72%, and increased indicator-evidence coverage from 68% to 94%. Qualitatively, it improved executive visibility, audit readiness, and a data-driven improvement culture. Functionally, the system aligns with ISO 9001:2015 (4.4, 7.5, 8.3, 9.1, 9.3, 10.2–10.3) by reinforcing process orientation, documented information, measurement, and continual improvement. Recommendations and future work include integrated improvement plans and internal audit modules.