Diseño de políticas de seguridad informática para la dirección de tecnologías de la información y comunicación (DTIC) de la Universidad de Cuenca

Abstract

This thesis consists in the design of security policies for the three units that make up the DTIC: Computer Services, Information Systems, and Networks and Communications. To get an efficient development of the research the recommendations suggested by the Ecuadorian Technical Standard NTE INEN ISO / IEC 27002:2009, will be used. They are: The Information Technology and Communication Security Policy Manual - International Best Practices and other documents related to the information technology security. In Chapter 1, general aspects as: problems, background, justification, objectives. In chapter 2 some terms and definitions will be cited. The structure of the norm NTE INEN ISO / IEC 27002: 2009 will be reviewed. The information about assets will be collected. In chapter 3, the execution of the information technology and communication security controls from DTIC department will be analyzed. The security domains will be determined based on the results of information obtained through field visits and staff interviews. In chapter 4 the most relevant, principal and complementary politics, to DTIC will be designed to improve execution rates. Finally, in Chapter 5 some conclusions and recommendations will be written. Additionally, a policy document will be prepared to deliver to DTIC.