Sistema de gestión de la seguridad de la información para la protección de los datos personales en el uso de historia clínica electrónica del Hospital Rafael Uribe Uribe.

Abstract

This project do evaluation of the controls applied to the information assets of the Rafael Uribe Uribe Hospital, specifically those that refer to the security of the data stored in the Clinical History of the patients, is based on the Cybersecurity Framework proposed by the US government; the Methodology of Risk Analysis and Management: Magerit, is used for the identification of information assets and how improvements to the ISMS can be applied through the strengthening of the controls, as a result a series of suggestions is elaborated as evaluated in the same document.