Propuesta de un sistema de gestión de seguridad de la información para cámaras GESELL usando el estándar ISO 27001. Caso de estudio: Consejo de la Judicatura de Morona Santiago.

Abstract

The objective of this research is the development of an Information Security Management System (ISMS) for Gesell cameras of the Judiciary Council of Morona Santiago, using the ISO 27001 standard. This standard provides effective tools for the management of an ISMS in order to evaluate risks and define control applications necessary to eliminate them. After identifying and analyzing the threats that lead to the loss of information security in the Gesell camera proceedings, a questionnaire with questions based on threats and risks was carried out to the operational personnel in two stages, before and after the implementation of the ISMS. The results before the implementation show that the probability of a security incident occurring is 82.85%. The post- implementation results show that the probability of risk of occurrence of a security incident is 15.15%, a significant reduction of 67.7%. The increase of security policies, procedures, instructions, records, demonstrates the effectiveness of the Information Security Management System for Gesell cameras of the Judiciary Council of Morona Santiago, increasing the information security. It is recommended to periodically train Gesell camera operators on security policies, procedures and also to sign confidentiality agreements to avoid an increase in risks.