Desarrollo de un sistema web y un módulo de seguridad basado en la norma ISO 27000, para mitigar y controlar la integridad de la información.

Abstract

In this research, a web system and a security module based on ISO 27000 standards were developed to mitigate and control information integrity. During the software engineering phase of the system, the spiral methodology was applied, reflecting a relationship between tasks with rapid prototypes, greater parallelism, and concurrency in design and construction activities. The security module design was based on ISO 27001 standards, which provide a framework for information protection and assist organizations in effectively identifying and managing information security risks. This established the requirements for implementing, maintaining, and continuously improving the information security system, thereby safeguarding the confidentiality, integrity, and availability of information. With the implementation of the web system and security module in a company that previously lacked these tools, the following results were obtained: a 40% reduction in costs, a 44% increase in productivity, a 50% improvement in information availability, a 70% increase in reliability, a 90% performance improvement, and a 90% enhancement in information security. From this, it is concluded that the use of a computer system with appropriate security techniques implemented in any company will help control and mitigate risks that affect information security integrity.