Analysis of the information by the management of security incidents in organizations

• Autores: Tasa-Catanzaro, María Elena, Maquera-Quispe, Henry George, Rojas-Bujaico, John Fredy, Delgado-Rospigliosi, Marjorie Gabriela del Carmen
• Formato: artículo
• Fecha de Publicación: 2022
• Institución: Universidad Nacional Autónoma de Huanta
• Repositorio: Puriq
• Lenguaje: español
• OAI Identifier: oai:ojs2.www.revistas.unah.edu.pe:article/196
• Enlace del recurso: https://www.revistas.unah.edu.pe/index.php/puriq/article/view/196
• Nivel de acceso: acceso abierto
• Materia: incidente; información; seguridad; buena práctica; Good practice; incident; information; security; Boas práticas; Informações; segurança

Security incidents in an organization are considered the main source for evaluating the correct application of security controls in public or private organizations. The investigation is based on the behavior of the incidents before the participation of information technology controls together with the formal processes in the organizations. Good security practices based on the international standards ISO / IEC 27001 and ISO / IEC 27002 were used. The Magerit v3 methodology and business intelligence techniques were applied to integrate and process the information obtained through heterogeneous sources of information implemented in the organizations under study. The information obtained was established in 9 security controls common to the organizations under study applied under an experimental study. The analysis of the arrival data will establish that the constant monitoring and supervision of the application of the security controls raises the security levels in the organizations that guarantee the continuity of the services and processes.