Elaboración de la guía de implantación de las normas prioritarias del esquema gubernamental de seguridad de la información EGSI en las entidades de la administración pública central

Abstract

This dissertation contains a guide for the implementation of the Standards of Governmental Information Security (EGSI, for its name in Spanish) in organizations of the Executive branch of the Public Administration of Ecuador. The scheme allows practitioners to follow a set of steps to implement these standards. In Chapter I, the document analyses the practices of Information Security in public institutions of Ecuador, related legislation, and its links with EGSI. Also, it features a methodology for controlling and monitoring its implementation and a description of controls related to Information Technology (IT). Chapter II presents the guidelines for EGSI implementation, with the steps to determine the current state, policies and procedures of Information Security for the entities' IT units to deliver controls. The third chapter validates the guide through its application in the National Agency of Regulation and Control of the Electricity Sector (ARCONEL). Finally, Chapter IV presents the conclusion and recommendations that follow the elaboration of this document.