Implementacion de un Sistema de Gestion de Seguridad de la Informacion para una empresa de consultoria y auditoria, aplicando la norma ISO/IEC 27001

Abstract

In the last years, with the development of information technologies and their direct relation to the objectives of the organizations, the universe of threats and vulnerabilities is growing, so is necessary to protect one of the most important assets of the organization, information, guaranteeing the availability, confidentiality and integrity of the same. The most appropriate way to protect information assets is through proper risk management in order to identify and focus efforts on those elements that are most exposed. This titling project gathers the necessary information for the implementation of a Management System Information Security, based on the ISO 27001:2005 to ensure the protection of information assets and give confidence to customers of A&CGroup S.A. The standard adopts a process approach for establishing, implementing, operating, monitoring, reviewing, maintaining and improving an ISMS.