Plan de implementación de un SGSI y aplicación de controles críticos en el centro de operaciones de seguridad en la empresa GMS

Abstract

Nowadays, the company GMS an organization dedicated to providing services for information security management, is aspiring to achieve a certification of the ISO/IEC 27001:2013, so it requires the implementation of controls that allow it tp manage the information security in the operations of its processes that support the delivery of the service to its customers. This project defines the implementation plan of the Information Security Management System (ISMS) in one process of GMS and aims to guide GMS to achieve certification. The structure of this document is detailed below: The first chapter constitutes an introduction to information security in Ecuador, it details the objectives and scope of the project, it also describes a brief analysis of the Information Security Management System based on ISO/IEC 27001:2013, the Deming cycle (PDCA cycle) and a comparative analysis between risk management methodologies. The second chapter describes the methodology used for the development of the project, that is, the "Plan" and "Execute" phases corresponding to the Deming cycle, the "Plan" phase which is applied fully in the project, explains the initial safety assessment process, management risk methodology, risk analysis and the declaration of applicability. The “Execute” phase is partially applied in the project and describes the controls that have been implemented in the case of study. The third chapter presents the compliance status of the controls selected in the second chapter and the result of its application. With this data, a comparison is made between the level of security that was confirmed and the level of security that the critical controls were then implemented. The fourth chapter includes the conclusions based on the results obtained and the recommendations made by the author of the project for the maintenance of the ISMS to support the management of the case study company.