Diseño de un sistema de gestión de seguridad (SGSI) para la empresa Manofacturera Persianas Y Enrollables Safra SAS basado en los estándares de la norma ISO 27001

Abstract

Persianas y Enrollables Safra S.A.S is an organization that is mainly dedicated to the ommercialization of blinds and fabrics nationwide. Within the area of systems and telecommunications, the need arises to design a process tool linked mainly to information security, from this a document is presented whose main objective is to present a guide for a system design of Information Security Management (SGSI), for the company, based on the ISO 27001: 2013 standard and the PHVA methodology (Plan, Do, Verify and Act), aligned with the company's organizational strategy and policies Through this document the risks, the vulnerabilities and the level of criticality of the same to which the organization is exposed are exposed, the information security management system (SGSI), which is defined in different segments for better understanding, where an estimate of costs for a future implementation is offered, an internal web module with which you can obtain information about the current and active risks of the organization, you can notify if there is any risk or threat that was not contemplated in the present document and finally determined policies that allow the organization to avoid threats and vulnerabilities in the return to reality and affect the company. Persianas Safra can have this document to perform an implementation of an SGSI, with the processes identified.