Citas bibligráficas
Conislla, C., Montenegro, Y. (2022). Implementación de controles según la NTP-ISO/IEC 27001:2014 en la gestión de accesos de la empresa Securitas S. A. C. en Lima 2021 [Tesis, Universidad Privada del Norte]. https://hdl.handle.net/11537/29632
Conislla, C., Montenegro, Y. Implementación de controles según la NTP-ISO/IEC 27001:2014 en la gestión de accesos de la empresa Securitas S. A. C. en Lima 2021 [Tesis]. PE: Universidad Privada del Norte; 2022. https://hdl.handle.net/11537/29632
@misc{renati/433187,
title = "Implementación de controles según la NTP-ISO/IEC 27001:2014 en la gestión de accesos de la empresa Securitas S. A. C. en Lima 2021",
author = "Montenegro Martinez, Yonathan Damner",
publisher = "Universidad Privada del Norte",
year = "2022"
}
The following thesis "Implementation of controls according to the NTP-ISO / IEC 27001: 2014 in access management of the company SECURITAS SAC in Lima 2021" aims to define and implement access controls for the company SECURITAS SAC, a Gap analysis to know the state of compliance in the use of access controls and the desired state, a risk analysis was also carried out, finding the probabilities that exist in the materialization of a possible attack and the impact. This was done based on the NTP-ISO / IEC 27001: 2014 Standard, focused on Annex A9 - Access Control. This is due to the fact that SECURITAS SAC has presented cases that have affected operations due to not having correctly implemented good access management in the IT administration area. The thesis mentions the theoretical concepts and its methodology for its development. Non-probability and convenience sampling was used, using observation and recording tools in cards with the validation of expert judgment for the sample of 10 systems taken at different times (Pre-test, Re-Test and Post-Test) with a quantitative approach. It was observed that the initial level of compliance is below what is necessary, so the implementation manages to increase the degree of maturity of controls to an acceptable level for the company to a "Managed" state that represents more than 75% giving the implementation as valid and functional.
Este ítem está sujeto a una licencia Creative Commons Licencia Creative Commons