ESTUDIO DEL ESTÁNDAR ISO 27001:2013 Y SU DISEÑO PARA LA APLICACIÓN A LA FACULTAD DE INGENIERÍA EN ELECTRICIDAD Y COMPUTACIÓN DE LA ESPOL

Abstract

Our study highlights the management of information in an educational organization. We analyze the use of ISO 27001:2013 because the institutions must maintain a high level of integrity, confidentiality and security of the data and the systems that manage the performance of their duties, since the use of this standard would reduce the flow interruption of the normal activities or loss of vital information. The study is aimed to a segment of the Faculty of Electrical and Computer Engineering ( FIEC for their acronym in Spanish) in order to verify the compliance with the mentioned ISO and present proposals if flaws and vulnerabilities are found. For the hardware and software analysis and risk management, the MAGERIT methodology was used. At the end the results will be shown in a report, along with the recommendations for the faculty so they can comply with the certification requirements