Diseño de una política de seguridad de la información para los hoteles miembros de la asociación hotelera de Imbabura, basado en la norma ISO/IEC 27002:2013

Abstract

This work focuses on developing a Security Policy for a group of hotels, specifically located in the Imbabura province of Ecuador, selecting controls found in the ISO/IEC 27002:2013 standard. Among the risk found, there is data theft, corruption, loss, breach, and more, which can compromise hotel, provider, client and guest information and physical security. Once the risk is properly assessed using INCIBE’s MAGERIT methodology, safeguards are determined based in formerly said controls, then, a Security Policy for member hotels is proposed in order to be adopted. Said policy aims to keep hotel, provider, client and guest data safe, by ensuring Confidentiality, Integrity and Availability requirements for information security and business continuity are met.