Aplicación de las normas técnicas iso/iec 27001 e iso/iec 27002 para el cumplimiento del esquema gubernamental de seguridad de la información (egsi) en la infraestructura del sistema nacional de nivelación y admisión (SNNA)

Abstract

SENESCYT has relevant information on High Education of Ecuador in the process of leveling and Admission, so it needs to be protected against threats. This project starts with a preliminary study that allows knowing the institution and way in which performs in respect of information security. For analysis and risk management it is used MAGERIT methodology, for that; information assets are identified, main vulnerabilities and threats to which they are exposed each asset; the risk is valuated and managed, taking like a reference the Technical Standard ISO / IEC 27002; in order to reduce level risk to an acceptable, for providing to institution security and confidence to achieve that their process continue and fulfill its mission. Finally, provides conclusions and recommendations of the project.