Diseño de una política de seguridad para la infraestructura de red de la Universidad Central del Ecuador basada en la ISO / IEC 27002:2013

Abstract

The goal of this project is to design a Security Policy for the network infrastructure of the Universidad Central del Ecuador based on ISO / IEC / 27002: 2013 that updates the existing policy in order to reduce the found security risks and thereby safeguarding the integrity, confidentiality, and availability of academic, financial, and research information. For the purpose of risk management, the Magerit methodology was used, where all the assets of the technological infrastructure of the institution are evaluated. The risk matrix evaluates threats and the impact, which determine the risk as to which the information is exposed. After the analysis is carried out, the types of protection and controls of the ISO / IEC / 27002: 2013 standard were selected. The present policy was developed according to this process, it is recommended to be approved, explained, and distributed within all the levels of the institution.