POLÍTICAS DE SEGURIDAD DE LA INFORMACIÓN DE APROVECHAMIENTO ESTUDIANTIL EN LA EDUCACIÓN GENERAL BÁSICA BASADO EN LA NORMA ISO 27002.

Abstract

Within the educational organization where information and communication technologies are involved, computer security is a fundamental pillar for the stability of institutional activity, especially due to the processes inherent to student information. Faced with this phenomenon, information has become one of the most valuable assets of any educational institution, which makes it necessary to develop Information Security Policies for student achievement, for example, through ISO 27002 and the MAGERIT risk analysis methodology. This approach contributes to the classification of information assets and the reduction of shortcomings, threats and risks of information loss. In this sense, a descriptive investigation was conducted at the Zulima Vaca Rivera school in the city of Pasaje, to characterize the strategies they use with respect to the reliability, integrity and availability of the information assets of the educational process. Surveys and interviews were conducted with teachers, students and authorities, and, a group of security policies were developed and proposed. It was concluded that there are limitations of a subjective and objective nature that interfere in the non-use of Information Security Policies.