Modelo guía para la Certificación en ISO 27001 de las entidades, que han implementado las normas establecidas por la estrategia de gobierno en línea.

Abstract

The main purpose of this project is to develop a tool which will be used as a reference, to guide the certification process in the ISO27001 international standard. It will be composed of a proposed model for state entities, based on the parameters defined in said standard. Which allow the protection, confidentiality and integrity of the data and information, as well as the systems that process it. This base will also be supported by the Online Government Strategy, prepared by the Ministry of Technology and Telecommunications. In order for the model to acquire dynamism, an application was developed to systematize the previously proposed, with the aim of streamlining and simplifying the entire process. An investigation was also proposed to know in depth the online Government model provided by the Ministry of information technology and communications, this was done to generate the proposal with the same GEL bases. In order to strengthen the project, an analysis and audit of the information security plan of a government entity will be proposed. Finally, there are some recommendations for the implementation of the ISO27001 certification model based on GEL, and for the treatment of the security plan.