Diseño de un sistema de gestión de seguridad de la información, basado en la norma ISO/IEC 27001:2013 para la compañía Aronem Air Cargo S.A.

Abstract

This present project presents an information security analysis and information security management system design for 3 process with their own sub-process from Aronem Air Cargo S.A. Company. For this it review the standards and methods more common and according to the company requirements mainly in availability, in addition integrity, confidentiality, accounting and traceability. The ISO/IEC 27001:2013 and ISO/IEC 27002:2013 standards was selected, and MAGERIT v3 management risk method and risk analysis FAIR’s Open Group, the process was analyzed, the risk analysis result and management of risk was presented, together with the statements of applicability, it finished whit the information security management system and the recommendations made to the company’s directors from the project’s author.