Análisis a los sistemas de información del hospital naval de guayaquil, vulnerabilidad y riesgos que afectan a los Sistemas Actuales
No hay miniatura disponible
Archivos
Fecha
2015
Autores
Título de la revista
ISSN de la revista
Título del volumen
Editor
Universidad de Guayaquil Facultad de Ciencias Administrativas
Resumen
En la mayoría de las empresas en nuestro medio sean públicas o privadas, cuando se trata del tema de la seguridad de la información, en cuanto a su disponibilidad, confiabilidad e integridad, se considera que es de importancia exclusivamente del área de tecnología, específicamente de los Departamentos de Tecnologías de la Información. El tema de la seguridad de la información, no sólo debe ser de interés del Área de Tecnologías, sino de todas las áreas, comenzado por la Dirección de cada una de las organizaciones, porque partiendo de la Dirección, es el ente que debe tener conciencia que uno de los activos más importantes es la información que poseen en su organización, ya que si llegara a faltar en el momento en que se necesite contar con su disponibilidad, se perdería información valiosa y crítica, que en el caso de instituciones relacionadas con el campo de la salud tendría un gran impacto, puesto que se maneja la información del historial clínico de los pacientes.
No se trata de solo apoyar económicamente en la adquisición de la mejor infraestructura tecnológica, sino también de apoyar con una gestión que implica la manera de saber cómo salvaguardar la información, llegando a conocer los objetivos y cuáles son las acciones que se deben tomar para conseguirlos. El tema de la implantación de un modelo basado en una norma de calidad para garantizar la seguridad de la información involucra a toda la organización y no sólo al área de tecnología que es la encargada de implementar el modelo; partiendo de la concientización del todo el personal que labora en la organización con la finalidad de alcanzar el éxito de la implantación. Las organizaciones deben garantizar la continuidad de sus actividades ante posibles amenazas o vulnerabilidades que afecten sus sistemas de información y su infraestructura de hardware. La ISO (Organización Internacional para la Estandarización) creó una norma certificable que permite a toda organización, la implementación de un Sistema de Gestión de Seguridad de la Información, como lo es la Norma ISO 27001 versión 2013 (27001:2013). El HOSNAG fue fundado el 11 de Noviembre de 1983, el cual brinda atención médica a siguientes tipos de pacientes: Militares activos, pasivos y sus derechohabientes. En la actualidad con la integración de los hospitales públicos en la Red Pública Integral de Salud, también se atiende en esta cada de salud a personas civiles. Si se habla de infraestructura tecnológica, en los últimos 7 años el HOSNAG ha evolucionado tecnológicamente, lo que implica ir de acuerdo con el avance de la tecnología para garantizar la seguridad de la información y de garantizar su confiabilidad, integridad y disponibilidad.
Esta tesis está basada aplicación de la metodología establecida por la Norma ISO 27001 versión año 2013 al sistema de consultorios y la infraestructura de hardware del HOSNAG, el cual ayudará a proponer mejoras en base a lo estandarizado en la Norma ISO.
In most companies in our public or private, when it comes to the issue of information security, in terms of availability, reliability and integrity, is considered to be of importance only in the area of technology, specifically the Departments of Information Technology. The issue of information security, should not only be of interest in the area of technology, but in all areas, begun by the Office of each of the organizations, because from the Directorate, is the entity that should be aware one of the most important assets is the information held on your organization, because if he were to miss in the time needed to have their availability, valuable and critical information is lost, as in the case of related institutions health field have a great impact, since medical history information of patients is handled. It is not only financially support in acquiring the best technology infrastructure, but also to support with a management that involves the way you know how to safeguard information, getting to know the objectives and the actions to be taken are to get . The issue of implementation of a model based on a quality standard to ensure information security involves the entire organization, not just the area of technology that is responsible for implementing the model; based on the awareness of all staff working in the organization in order to achieve successful implementation. Organizations must ensure the continuity of their activities to potential threats or vulnerabilities that affect information systems and hardware infrastructure. The ISO (International Organization for Standardization) created a certification standard that allows any organization, the implementation of a Safety Management System Information, such as the ISO 27001 version 2013 (27001: 2013). The HOSNAG was founded on November 11, 1983, which provides medical care to these types of patients: Military assets and liabilities and their heirs. At present the integration of public hospitals in the Comprehensive Public Health Network, also serves in this increasingly health civilians. If we speak of technological infrastructure in the last 7 years, it has evolved technologically HOSNAG, which involves going in accordance with the advancement of technology to ensure data security and to ensure the reliability, integrity and availability. This thesis is based application of the methodology established by the ISO 27001 version 2013 system offices and HOSNAG hardware infrastructure, which will help to propose improvements based on the standardized by ISO.
In most companies in our public or private, when it comes to the issue of information security, in terms of availability, reliability and integrity, is considered to be of importance only in the area of technology, specifically the Departments of Information Technology. The issue of information security, should not only be of interest in the area of technology, but in all areas, begun by the Office of each of the organizations, because from the Directorate, is the entity that should be aware one of the most important assets is the information held on your organization, because if he were to miss in the time needed to have their availability, valuable and critical information is lost, as in the case of related institutions health field have a great impact, since medical history information of patients is handled. It is not only financially support in acquiring the best technology infrastructure, but also to support with a management that involves the way you know how to safeguard information, getting to know the objectives and the actions to be taken are to get . The issue of implementation of a model based on a quality standard to ensure information security involves the entire organization, not just the area of technology that is responsible for implementing the model; based on the awareness of all staff working in the organization in order to achieve successful implementation. Organizations must ensure the continuity of their activities to potential threats or vulnerabilities that affect information systems and hardware infrastructure. The ISO (International Organization for Standardization) created a certification standard that allows any organization, the implementation of a Safety Management System Information, such as the ISO 27001 version 2013 (27001: 2013). The HOSNAG was founded on November 11, 1983, which provides medical care to these types of patients: Military assets and liabilities and their heirs. At present the integration of public hospitals in the Comprehensive Public Health Network, also serves in this increasingly health civilians. If we speak of technological infrastructure in the last 7 years, it has evolved technologically HOSNAG, which involves going in accordance with the advancement of technology to ensure data security and to ensure the reliability, integrity and availability. This thesis is based application of the methodology established by the ISO 27001 version 2013 system offices and HOSNAG hardware infrastructure, which will help to propose improvements based on the standardized by ISO.