Análisis de brecha basado en la norma ISO 27001 aplicado a una empresa de vigilancia, alerta y control aéreo

Abstract

This document analyzes the gap assessment based on the ISO/IEC 27001 standard in an air surveillance, alert, and control company. This degree project aims to design an updated plan to implement the ISO-27001 standard in the air surveillance, alert, and control company. The company Vigalco, which is the subject of this study, carries out the surveillance, alert, and control of Ecuadorian airspace. To fulfill its assigned mission, its operations rely on three critical components: communications, command and control, and aerial surveillance. This work focuses on the critical communications component because Vigalco’s senior management is concerned with safeguarding all generated information, as the company is constantly acquiring more information assets. The proposed solution is to design an implementation plan based on the identified gaps. This will allow determining compliance with ISO-27001 requirements and controls, and ensuring alignment with the proposed design. An evaluation model, considering the measures already implemented in the company, will be used as a reference point. Keywords: ISO/IEC 27001, evaluation model, ISO 27001 controls.