Modelo de gestión de seguridad de la información como referente para instituciones de educación superior (ies).
Fecha
2021-07-28Registro en:
Carreño, D & BernalL, D (2021). Modelo de gestión de seguridad de la información como referente para instituciones de educación superior (ies). Tesis de posgrado. Universidad Santo Tomás. Tunja
reponame:Repositorio Institucional Universidad Santo Tomás
instname:Universidad Santo Tomás
Autor
Carreño león, Diana Paola
Bernal Ríos, Diego Mauricio
Institución
Resumen
The implementation of Information Management models generates confidence variables in the management of the information environment, since the information systems, their data, and structure can be subject to external or internal threats that can affect the operation of the systems, for this, risks must be identified, and measures must be established on physical, technical and logical security (Vite Cevallos et al., 2018).
This article illustrates the phases to design an information security management model, managing to reduce threats and risks in HEIs, being essential and important to have an action plan against them, which allows to mitigate the impact.
The guidelines of the ISO 27001 Standard express the information security guidelines, standards and best practices to be applied and implemented in organizations.