Auditoría informática en la seguridad de la información según la ISO 27001 en empresas comerciales de El Carmen.

Abstract

The objective of this degree work was to conduct a computer audit of information security management according to ISO 27001 to 3 commercial companies in El Carmen, we began by identifying the problem by conducting an interview and survey of employees of these companies to justify this research, coming to determine that there was no knowledge about information security management and its importance, Therefore, as a proposal, an initial security audit was applied to determine the GAP, which consists of finding the percentage of non-compliance according to the standard of security requirements and controls, which contains a set of 7 items that organizations should comply with to consider that security management guarantees the integrity, confidentiality and availability of their information. As relevant results it was obtained that the company Translatin has a high maturity level and the companies Hermanos Loor and Alcívar have a medium maturity level, finally a manual for information security management is proposed for the aforementioned companies.