Implementation of access controls for a professional practice management system

• Autores: Torres Correa, Robert Emmanuel, Galvez Mori, Edisson Alejandro, Valdivia Valderrama, Jorge, Mendoza de los Santos, Alberto Carlos
• Formato: artículo
• Fecha de Publicación: 2023
• Institución: Universidad La Salle
• Repositorio: Revistas - Universidad La Salle
• Lenguaje: español
• OAI Identifier: oai:ojs.revistas.ulasalle.edu.pe:article/80
• Enlace del recurso: https://revistas.ulasalle.edu.pe/innosoft/article/view/80; https://doi.org/10.48168/innosoft.s11.a80; https://purl.org/42411/s11/a80; https://n2t.net/ark:/42411/s11/a80
• Nivel de acceso: acceso abierto
• Materia: Web information system; professional practices; ISO/IEC-27001; SCRUM; access control; Sistema web de información; prácticas profesionales; control de acceso

This article presents a web information system that will facilitate the management of professional practices at the National University of Trujillo. For this, an agile SCRUM methodology was applied because it is adaptable to the constant changes in the software development process and the access controls provided by the ISO 27001:2013 standard with the aim of guaranteeing the integrity, authenticity and availability of data. the information assets that the system possesses. The results obtained support the implementation of two-factor authentication and digital signature as essential controls for information management according to the calculated reliability. It is concluded that the access controls provide security in the information handled in the system according to the trust tests.