Bibliographic citations
Fajardo, J., Sanchez, S. (2024). Implementación de un modelo de prevención de pérdida y fuga de información para empresas del sector financiero en Perú [Trabajo de Suficiencia Profesional, Universidad Peruana de Ciencias Aplicadas (UPC)]. http://hdl.handle.net/10757/674507
Fajardo, J., Sanchez, S. Implementación de un modelo de prevención de pérdida y fuga de información para empresas del sector financiero en Perú [Trabajo de Suficiencia Profesional]. PE: Universidad Peruana de Ciencias Aplicadas (UPC); 2024. http://hdl.handle.net/10757/674507
@misc{renati/1298241,
title = "Implementación de un modelo de prevención de pérdida y fuga de información para empresas del sector financiero en Perú",
author = "Sanchez Bautista, Stephanny Gabriela",
publisher = "Universidad Peruana de Ciencias Aplicadas (UPC)",
year = "2024"
}
According to Law No. 30171, which modifies Law No. 30096 (Law on Cybercrimes), where are articles aimed at protecting the integrity and security of computer data, especially in financial entities. It is proposed to implement a security model with policies and controls for preventing data loss and leakage, considering ISO 27001/27002/27005/31000 standards, to enhance information security through policies, controls, and risk treatment. Data Loss Prevention (DLP) is a tool that thoroughly analyzes captured content to identify sensitive information, issuing alerts and security protocols. This allows for the review, analysis, and necessary actions to prevent data loss. A DLP solution covers three states of information: DATA IN MOTION, DATA AT REST, and DATA IN USE, to identify and apply the necessary control measures within the organization to prevent data leaks and losses. The model analyzes the company's information, cataloging it according to its type, classification, and valuation based on its sensitivity and importance. This will allow the identification and analysis of the risks to which the company is exposed. Based on this analysis, information security policies and procedures are developed. Based on the policies and risk analysis obtained, a risk treatment is developed to manage, minimize, or tolerate these risks, following a flowchart of the entity's activities and processes.
This item is licensed under a Creative Commons License