Diseño de un Sistema Integrado de Gestión a partir de la integración de los requisitos de las normas NTC-ISO 9001:2015 y NTC-ISO/IEC 27001:2013 para la empresa AMOVIL S.A.S

Abstract

Family organizations carry out practices that often do not facilitate their adaptation to globalization. In this context, management systems offer a route to achieve more efficient management. In addition, their high-level structure facilitates their implementation and integration. This study exposes the results achieved in a family-based organization dedicated to the design and development of software. The organization experienced rapid growth in ten years, which did not focus on processes and put management effectiveness at risk due to the centralization of functions in the senior management team and the loss of knowledge due to the lack of documentation practices. Through the present work, the design of an integrated management system (IMS) was proposed that would integrate the requirements of the NTC ISO 9001:2015 and NTC ISO/IEC 27001:2013 standards and that would offer the organization the bases for an organized operation, pragmatic and of permanent improvement through three phases: the preliminary diagnosis through the analysis of gaps, the design phase based on the Deming cycle methodology and the relationship of requirements, the execution phase through the documentation and implementation of the IMS, and the validation phase through an expert judgment report. The project resulted in an IMS that fully integrated the requirements of both standards, achieved knowledge management assurance, process-based management, and gave the company greater organizational robustness.