Publicación:

Políticas de seguridad informática para la administración de recursos tecnológicos y gestión de la información en la empresa consultorías y asesorías en seguridad y salud en el trabajo S.A.S (CONSASST)

Resumen

The present work of degree, is a compilation of information for the computer security of the company CONSASST (consultancies and consultancies in health and safety at work SAS) of the city of Neiva, given the obvious risk of computer attacks and possible losses of information. For this reason, the authors of the work focus on computer security within the company in question, taking into account that the processes must be applied progressively and that revisions must be made periodically given the complexity of the information that is managed in the entity . To this end, the lessons learned during the course of deepening in computer security and analysis tools with which they complement each other to perform a detailed detection of the computer security flaws of the CONSASST company are applied, which allows to identify the risk more specific, which allows taking measures and proposing more accurate solutions to minimize the risks posed in the following report. As technical specifications, ISO 27001 and 27002 are taken as reference.