Modelo de gestión de seguridad de la información como referente para instituciones de educación superior (ies).

Abstract

The implementation of Information Management models generates confidence variables in the management of the information environment, since the information systems, their data, and structure can be subject to external or internal threats that can affect the operation of the systems, for this, risks must be identified, and measures must be established on physical, technical and logical security (Vite Cevallos et al., 2018). This article illustrates the phases to design an information security management model, managing to reduce threats and risks in HEIs, being essential and important to have an action plan against them, which allows to mitigate the impact. The guidelines of the ISO 27001 Standard express the information security guidelines, standards and best practices to be applied and implemented in organizations.