Citas bibligráficas
Navarro, A., (2024). Modelo de seguridad de la información para contribuir en la gestión de entidades de servicios de saneamiento del norte peruano [Universidad Católica Santo Toribio de Mogrovejo]. http://hdl.handle.net/20.500.12423/7198
Navarro, A., Modelo de seguridad de la información para contribuir en la gestión de entidades de servicios de saneamiento del norte peruano []. PE: Universidad Católica Santo Toribio de Mogrovejo; 2024. http://hdl.handle.net/20.500.12423/7198
@mastersthesis{renati/583582,
title = "Modelo de seguridad de la información para contribuir en la gestión de entidades de servicios de saneamiento del norte peruano",
author = "Navarro Reyes, Alejandro Javier",
publisher = "Universidad Católica Santo Toribio de Mogrovejo",
year = "2024"
}
The research work carried out focuses on the requirement to adequately manage Information Security (hereinafter SI) in the Sanitation Service Providing Entities (EPS) in northern Peru, detected after the diagnosis applied to a sample of four entities. of the sector, where it was demonstrated that they lack instruments for their management in order to ensure the availability, integrity and confidentiality of their information assets, in addition to not having structures (roles and areas) that support the management of the IS. . The general objective set was to propose an IS model based on frameworks and standards related to the IS, to contribute to the management of the EPS in northern Peru. The research work carried out is of a purposeful and descriptive type, with a non-experimental design. The content of the proposed IS model was validated by expert judgment, achieving its acceptance, which allows it to be applied in other EPSs in northern Peru. Likewise, the validity of the relevance of the proposed IS model was verified when applied as a case study in the Lambayeque Sanitation Services Provider Entity (EPSEL S.A.), managing to identify 165 risks, of which it was observed that there are 31 risks of extreme magnitude and 30 high magnitude risks, to which 15 security controls were applied, which were monitored to estimate their degree of compliance, establishing a continuous improvement plan with the 10 controls that partially comply with their performance.
Este ítem está sujeto a una licencia Creative Commons Licencia Creative Commons