Bibliographic citations
García, Á., (2021). Implementación de un sistema de gestión de la seguridad de la información basado en la norma ISO/IEC 27001 para optimizar el análisis de los riesgos informáticos en la empresa ARMER S.A.C. [Universidad Tecnológica del Perú]. https://hdl.handle.net/20.500.12867/5426
García, Á., Implementación de un sistema de gestión de la seguridad de la información basado en la norma ISO/IEC 27001 para optimizar el análisis de los riesgos informáticos en la empresa ARMER S.A.C. []. PE: Universidad Tecnológica del Perú; 2021. https://hdl.handle.net/20.500.12867/5426
@misc{renati/810010,
title = "Implementación de un sistema de gestión de la seguridad de la información basado en la norma ISO/IEC 27001 para optimizar el análisis de los riesgos informáticos en la empresa ARMER S.A.C.",
author = "García Abad, Ángel Manuel",
publisher = "Universidad Tecnológica del Perú",
year = "2021"
}
The objective of this research is the implementation of an Information Security Management System (ISMS) based on the ISO / IEC 27001 standard in the HR and Logistics areas of the company ARMER SAC, contributing to the analysis of computer risks, identifying information assets and recognizing all types of vulnerabilities and threats in the selected areas, as well as determining a risk assessment for subsequent definition of controls.To achieve the proposed objective of the research, the PDCA methodology was developed for the implementation of the ISMS, on the other hand, the MAGERIT methodology was used for risk assessment.The type of this research is applied and the sample is non-probabilistic, with 10 workers from the HR area and 10 workers from the Logistics area of the company ARMER S.A.C. On the other hand, in the first instance it was evidenced that the organization did not have policies that protect the pillars of information security, and a risk assessment was not carried out with respect to information assets.Finally, after the implementation of the Information Security Management System, it was evidenced that the organization identified the information assets by conducting a risk analysis, as well as implementing policies that protect the information security, also allowing the company ARMER SAC implement controls based on the standard, reducing the risk of loss of information.
This item is licensed under a Creative Commons License