Definición de las políticas de seguridad de la información para la red convergente de la Presidencia de la República del Ecuador basado en las normas ISO 27000

Abstract

Information security policies at the network level and user for the email service and video of the Presidency of the Republic based on a previous risk analysis were defined. For the analysis, previously, some risk analysis methodologies of information security as MAGERIT, ISO 27005, FRAAP, OCTAVE-ALLEGRO was studied. The OCTAVE-ALLEGRO methodology was used for this analysis, which starts by defining areas of impact, that is inherent to the mission of the institution could be affected if one of the possible threats effected, reach areas. Once defined impact areas critical, the information assets also was defined well as containers where the information is stored, processed and transmitted and to define the different stages of these defined threats. Finally threats defined with the possible consequences and seriousness that is simply multiplying areas of impact and likelihood of threat, once obtained these added values, each impact area,