Bibliographic citations
Milla, I., (2022). Diseño de un sistema de gestión de seguridad de información (SGSI) orientado a la protección de datos personales del alumnado del colegio Tres Libras, siguiendo la norma NTP ISO/IEC 27001:2014 conforme a la ley peruana de protección de datos personales 29733 [Tesis, Universidad Peruana de Ciencias Aplicadas (UPC)]. http://hdl.handle.net/10757/668157
Milla, I., Diseño de un sistema de gestión de seguridad de información (SGSI) orientado a la protección de datos personales del alumnado del colegio Tres Libras, siguiendo la norma NTP ISO/IEC 27001:2014 conforme a la ley peruana de protección de datos personales 29733 [Tesis]. PE: Universidad Peruana de Ciencias Aplicadas (UPC); 2022. http://hdl.handle.net/10757/668157
@misc{renati/405766,
title = "Diseño de un sistema de gestión de seguridad de información (SGSI) orientado a la protección de datos personales del alumnado del colegio Tres Libras, siguiendo la norma NTP ISO/IEC 27001:2014 conforme a la ley peruana de protección de datos personales 29733",
author = "Milla Carranza, Ivan Ernesto",
publisher = "Universidad Peruana de Ciencias Aplicadas (UPC)",
year = "2022"
}
This work corresponds to a design stage of an information security management system according to ISO specifications based on the Peruvian technical standard NTP ISO / IEC 27001: 2014 whose scope is the protection of personal data information of students from a private school in the city of Lima in the second decade of this century. That is, it must include the law on the protection of personal data LPDP 29733. The protection of personal data is a fundamental right of the person since the declaration of the political constitution from Peru since 1993 in its article 2 subsection 6 literally describes that information services, computerized or not, public or private must not provide information that affects personal and family privacy. Then 20 years later, the protection law of personal data was enacted in 2013. The solution context is determined by identifying the information assets related to information of the personal data type of the people to be protected, in this case students from the school in question, especially because they are minors’ persons. The national authority for the protection of personal data ANPDP specifies levels of treatment by number of records and storage time. A complex type corresponds to our organization and the ANPDP security guideline recommends establishing an ISMS based on ISO / IEC27001 adopting a risk approach technique applied to the data bank to be protected. In the present study we have used the framework based on ISO / IEC 27005 standard.
This item is licensed under a Creative Commons License