Implementación de políticas de seguridad en dispositivos móviles para el manejo de información en PYMES.

Abstract

The objective of this study is to implement security policies in mobile devices for the management of information in small and medium-sized enterprises (SMEs), for the development of this research project the methodology that is based on the ISO / IEC 27001 standards was applied: 2015, according to the needs of the TELECOMEXPERT company. In the first place, a survey of the current situation of the company was carried out regarding the regulations that the company has in terms of mobile devices for information management. The output of this process provided the basis for conducting the analysis of the policies that needed to be developed for application in the company. An analysis of risks, threats and vulnerabilities to which the data accessed through mobile devices are exposed was carried out, where key points were obtained for the creation of security policies on mobile devices, for which we proceeded with the identification of the assets and it was categorized based on the importance that each one represents for the company. From the aforementioned processes, the necessary data was obtained for the implementation of policies that adapt to the reality of the TELECOMEXPERT company, taking into account the guidelines of the NTE INEN-ISO / IEC 27001: 2015 and NTE INEN-ISO IEC 27002 regulations. After applying the policies, they were evaluated and an increase in knowledge of the regulations and policies that were implemented in the TELECOMEXPERT company could be appreciated, improving the integrity of data transmission through mobile devices. going from 13.64% to 86.36%, improving the confidentiality of the data by 36.36%, as well as the availability of the same by 18.18%. Nowadays it is an era where technology plays a role, so it is important to have the necessary tools to maintain the security of the information, so the correct implementation of security policies for the management of information through Mobile devices help maintain the reliability, availability and integrity of this.