Análisis de procedimientos para prevenir la filtración de datos mediante la implementación de controles de la norma ISO 27001 en el centro operativo local ECU 911 Babahoyo.
| dc.contributor.advisor | Saltos Viteri, Harry Adolfo | |
| dc.contributor.author | Pendolema Espinosa, Ariel Oswaldo | |
| dc.date.accessioned | 2024-03-14T17:55:31Z | |
| dc.date.available | 2024-03-14T17:55:31Z | |
| dc.date.issued | 2024 | |
| dc.identifier.uri | http://dspace.utb.edu.ec/handle/49000/15665 | |
| dc.description | Demanding study examines the procedures implemented at the ECU 911 Babahoyo Local Operations Center to prevent data leakage through the application of ISO 27001 controls. An interview was conducted with the assigned head to analyze these procedures. The interview results revealed the implementation of physical and logical access controls, firewalls, intrusion detection systems, and encryption of sensitive data. Information security policies and incident management procedures were highlighted. Challenges were identified such as evolving malware, staff training and mobile device management. Weaknesses were noted in user authentication, password management and system monitoring. The possibility of certifying the center to ISO 27001 was discussed, which would entail additional controls, regular risk assessments and training programmes. This study found a solid basis for the execution, improving the information security, ensuring the confidentiality, integrity, and availability of critical information in the operation center. The study provides us a comprehensive analysis of information security procedures and initiatives to reinforce information protection at the ECU 911 Babahoyo Local Operation Centre. | es_ES |
| dc.description | Demanding study examines the procedures implemented at the ECU 911 Babahoyo Local Operations Center to prevent data leakage through the application of ISO 27001 controls. An interview was conducted with the assigned head to analyze these procedures. The interview results revealed the implementation of physical and logical access controls, firewalls, intrusion detection systems, and encryption of sensitive data. Information security policies and incident management procedures were highlighted. Challenges were identified such as evolving malware, staff training and mobile device management. Weaknesses were noted in user authentication, password management and system monitoring. The possibility of certifying the center to ISO 27001 was discussed, which would entail additional controls, regular risk assessments and training programmes. This study found a solid basis for the execution, improving the information security, ensuring the confidentiality, integrity, and availability of critical information in the operation center. The study provides us a comprehensive analysis of information security procedures and initiatives to reinforce information protection at the ECU 911 Babahoyo Local Operation Centre. | es_ES |
| dc.description.abstract | El caso de estudio examina los procedimientos implementados en el Centro Operativo Local ECU 911 Babahoyo para prevenir la filtración de datos mediante la aplicación de controles de la norma ISO 27001. Se realizó una entrevista con el jefe encargado, para analizar estos procedimientos. Los resultados de la entrevista revelaron la implementación de controles de acceso físico y lógico, firewalls, sistemas de detección de intrusiones y encriptación de datos sensibles. Se destacaron políticas de seguridad de la información y procedimientos de gestión de incidentes. Entre las novedades encontradas se puede identificar el desarrollo de los peligros informáticos, la deficiencia en la educación al personal y al uso de celulares en la institución; adicional a esto se identifican problemas en el reconocimiento de usuarios, el manejo de contraseñas y a la vigilancia de los sistemas del centro. Con todo lo indicado se entablo una conversación con los interesados para determinar la probabilidad de lograr certificar a la institución con la normativa ISO 27001 para mejorar los controles de este y de la misma manera crear jornadas de capacitación al personal. El estudio proporciona un análisis exhaustivo de los procedimientos de seguridad de la información, los desafíos y las iniciativas para fortalecer la protección de datos en el Centro Operativo Local ECU 911 Babahoyo. Esto establece una base sólida para implementar mejoras continuas en la seguridad de la información, garantizando la confidencialidad, integridad y disponibilidad de los datos críticos en el centro operativo. | es_ES |
| dc.format.extent | 38 p. | es_ES |
| dc.language.iso | es | es_ES |
| dc.publisher | Babahoyo: UTB-FAFI. 2024 | es_ES |
| dc.rights | Atribución-NoComercial-SinDerivadas 3.0 Ecuador | * |
| dc.rights.uri | http://creativecommons.org/licenses/by-nc-nd/3.0/ec/ | * |
| dc.subject | Controles | es_ES |
| dc.subject | Norma ISO 27001 | es_ES |
| dc.subject | Centro Operativo Local ECU 911 Babahoyo | es_ES |
| dc.subject | Seguridad de la información | es_ES |
| dc.title | Análisis de procedimientos para prevenir la filtración de datos mediante la implementación de controles de la norma ISO 27001 en el centro operativo local ECU 911 Babahoyo. | es_ES |
| dc.type | bachelorThesis | es_ES |
Files in this item
This item appears in the following Collection(s)
Except where otherwise noted, this item's license is described as Atribución-NoComercial-SinDerivadas 3.0 Ecuador