Desarrollo de un plan de seguridad informática que permita la confidencialidad integridad y disponibilidad de la información en el Juzgado de la Niñez y Adolescencia de la ciudad de Quito.

Abstract

A computer security plan was developed to provide confidentiality, integrity and information availability to the Court of Children and Adolescents of the city of Quito. This plan was developed taking into consideration the current legislation as well as a comparison between the ISO 27001 and 27002 Standards. This plan was implemented in the Court for Children and Adolescents of the city of Quito. Two evaluations were carried out. The first one took place before implementing the plan. Potential risks were found and weighed focusing on the confidentiality, integrity and privacy of the information. As a result, by using this criteria and methodology, critical risks were detected. The second evaluation took place after the implementation of the plan. From the study carried out, it was possible to protect the assets of the organization. The weighted probability average of risks occurring after the plan was implemented significantly decreased. Therefore, it is recommended that the computer security plan in the Court of Children and Adolescents of the city of Quito remains an ongoing process, since it focuses on continuous monitoring and assessment of all the implemented methods.