Diseño de un sistema de gestión de riesgos en la seguridad de la información, orientado al gobierno de TI en base a la norma NTE INEN-ISO/IEC 27005:2012, para la Dirección Nacional de Desarrollo Tecnológico en Telecomunicaciones (DTT), de la Superintendencia de Telecomunicaciones

Abstract

The National Directorate of Technological Development in Telecommunications, within the SUPERTEL, is responsible for managing four key areas: computer support, developing software for the institution, network infrastructure and lifting requirements for projects, which, have a System for Risk Management in Information Security is essential, as this direction is the point where concentrated and manipulates information. The main objective of this project is to design a system that allows managing Risks in Information Security, oriented IT Governance, based on the Standard NTE INEN ISO / IEC 27005: 2012 for the National Directorate of Technological Development Telecommunications, which will allow appropriate treatment to the risks in information security, minimizing them to an acceptable level and preventing the emergence of new risks, making the Management Information Security more efficient. With the development of this project, it will have information necessary to fulfill a part of the first stage in the development of an M+SIS (Management System Information Security).