Citas bibligráficas
Flores, T., Wherrems, R. (2023). Auditoria de seguridad de la información utilizando ISO/IEC 27001 en una compañía del sector bancario [Trabajo de Suficiencia Profesional, Universidad Peruana de Ciencias Aplicadas (UPC)]. http://hdl.handle.net/10757/670787
Flores, T., Wherrems, R. Auditoria de seguridad de la información utilizando ISO/IEC 27001 en una compañía del sector bancario [Trabajo de Suficiencia Profesional]. PE: Universidad Peruana de Ciencias Aplicadas (UPC); 2023. http://hdl.handle.net/10757/670787
@misc{renati/410902,
title = "Auditoria de seguridad de la información utilizando ISO/IEC 27001 en una compañía del sector bancario",
author = "Wherrems Paico, Ronald Joe Davy",
publisher = "Universidad Peruana de Ciencias Aplicadas (UPC)",
year = "2023"
}
In this project, an audit was conducted under the ISO/IEC 27001 standard at a company in the banking sector that required an analysis of its Information Security Management System (ISMS). This process included the review of policies, procedures, controls, and practices to ensure they align with the ISO 27001 standards, which are essential for safeguarding the confidentiality, integrity, and availability of data within the banking entity, to comply with the standards and mitigate risks. During the audit, the company's ISMS documentation was examined, and interviews were scheduled with control owners and process owners for their understanding. The findings were documented in a report that provides a detailed level of compliance of the company's ISMS with the ISO 27001 standards. A high level of compliance can ensure better protection against potential theft of sensitive data stored, which can affect its reputational level and trust with its clients. Finally, thanks to this audit, the company in the banking sector identified the gaps in its ISMS under the ISO 27001 standard, with one observation in the clauses and another observation in the controls. These served as a starting point for making the corresponding improvements, in accordance with the observations and recommendations presented.
Este ítem está sujeto a una licencia Creative Commons Licencia Creative Commons