Bibliographic citations
Quispe, J., Pacheco, D. (2018). Modelo de evaluación de riesgos de seguridad de la información basado en la ISO/IEC 27005 para analizar la viabilidad de adoptar un servicio en la nube [Tesis, Universidad Peruana de Ciencias Aplicadas (UPC)]. http://hdl.handle.net/10757/625879
Quispe, J., Pacheco, D. Modelo de evaluación de riesgos de seguridad de la información basado en la ISO/IEC 27005 para analizar la viabilidad de adoptar un servicio en la nube [Tesis]. PE: Universidad Peruana de Ciencias Aplicadas (UPC); 2018. http://hdl.handle.net/10757/625879
@misc{renati/1286056,
title = "Modelo de evaluación de riesgos de seguridad de la información basado en la ISO/IEC 27005 para analizar la viabilidad de adoptar un servicio en la nube",
author = "Pacheco Pedemonte, Diego Ludwing",
publisher = "Universidad Peruana de Ciencias Aplicadas (UPC)",
year = "2018"
}
The purpose of the project is to propose an information security risk assessment model based on ISO / IEC 27005 to determine the feasibility of obtaining a service in the cloud, since in every organization it is necessary to know the security risks of information that they currently assume with the security controls implemented and those that could be assumed with the acquisition of a new service in the cloud so that they can make the decision to opt for one or the other. The model was made based on 3 phases. First, a relevant investigation of good practices in information security was carried out. In the research, ISO / IEC 27001 was used, which gives us an overview of an information security management system. Likewise, the ISO / IEC 27005 is chosen oriented to the management of information security risks in an organization. Second, the model proposal is presented and its phases are described as contextualization of the organization, risk identification, risk assessment and risk treatment. Finally, the model was deployed in the process of partial and final examinations of the area of academic records of the “Universidad Peruana de Ciencias Aplicadas”.
This item is licensed under a Creative Commons License