Propuesta Metodológica y Simulación de la Implementación de un SIEM basado en la Norma ISO 27001 y/o 27002

Abstract

The present Master's thesis titled "Methodological Proposal and Simulation of the Implementation of a SIEM (Security Information and Event Management), based on the ISO (International Organization for Standardization) 27001 and 27002 standards, originated with the objective of developing a Methodology for the implementation of the SIEM, to cover its absence at a global level, capable of being used in IT (Information Technology) business models, as a practical, effective and efficient tool that facilitates the complex task of implementing the technology for branch professionals. The development of the methodology was structured in four phases: In the first called "Theoretical", the types of business models of IT with their respective subdivisions were detailed. The second phase called "Design" addressed the SIEM implementation methodology taking as reference the work called "Methodology to create methodologies". In the third phase entitled "Implementation", the validation of the previously developed SIEM implementation methodology was carried out through a proof of concept. Finally, in the "Results" phase, the information obtained was processed, which determined the scope and limitations of the methodology created, demanding the changes and corrections pertinent to it, in order to obtain the corrected SIEM Implementation Methodology as a result of the titling work.