TY - GEN
T1 - Implementación de la NTP ISO/IEC 27001 en las Instituciones Publicas:Caso de Estudio
AU - Sussy, Bayona
AU - Wilber, Chauca
AU - Milagros, Lopez
AU - Carlos, Maldonado
N1 - Publisher Copyright:
© 2015 AISTI.
Copyright:
Copyright 2015 Elsevier B.V., All rights reserved.
PY - 2015/7/28
Y1 - 2015/7/28
N2 - In recent years, due to the intensive use of information technology, the information security has become a crucial and strategic issue in organizational management. Various standards and guidelines for security information as ISO/IEC 27001, ISO/IEC 27002, and COBIT have been developed; however, organizations still face difficulties in their implementation. This paper presents the current situation of the ISO/IEC 27001 implementation process in Peruvian public organizations. As a result of literature review, the critical success factors for successful implementation of ISO/IEC 7001 were identified. Furthermore, it was conducted a review of the ISO/IEC 27001 implementation in five organizations, taking into consideration the critical success factors identified. From the results obtained, it is concluded that there is the need for considering not only technical, legal, and organizational issues but also factors related to people such as training, knowledge and awareness raising in order to get success of information security management.
AB - In recent years, due to the intensive use of information technology, the information security has become a crucial and strategic issue in organizational management. Various standards and guidelines for security information as ISO/IEC 27001, ISO/IEC 27002, and COBIT have been developed; however, organizations still face difficulties in their implementation. This paper presents the current situation of the ISO/IEC 27001 implementation process in Peruvian public organizations. As a result of literature review, the critical success factors for successful implementation of ISO/IEC 7001 were identified. Furthermore, it was conducted a review of the ISO/IEC 27001 implementation in five organizations, taking into consideration the critical success factors identified. From the results obtained, it is concluded that there is the need for considering not only technical, legal, and organizational issues but also factors related to people such as training, knowledge and awareness raising in order to get success of information security management.
KW - critical success factors
KW - information security management system
KW - ISMS
KW - NTP ISO/IEC 27001
UR - http://www.scopus.com/inward/record.url?scp=84943327926&partnerID=8YFLogxK
U2 - 10.1109/CISTI.2015.7170355
DO - 10.1109/CISTI.2015.7170355
M3 - Contribución a la conferencia
AN - SCOPUS:84943327926
T3 - 2015 10th Iberian Conference on Information Systems and Technologies, CISTI 2015
BT - 2015 10th Iberian Conference on Information Systems and Technologies, CISTI 2015
PB - Institute of Electrical and Electronics Engineers Inc.
T2 - 10th Iberian Conference on Information Systems and Technologies, CISTI 2015
Y2 - 17 June 2015 through 20 June 2015
ER -