Guía Técnica Metodológica en Seguridad y Ciberseguridad: Un enfoque práctico, caso de estudio

This research proposes a technical methodological guide in Security and Cybersecurity with the objective of facilitating the use and documentation in this area of specialization for companies. It has three approaches to the ISO 27001:2023 standards Information security, cybersecurity and privacy protection, Information security management systems, ISO 27002:2023, Information security controls and 27005:2019, Information Security Risk Management, which will be developed throughout the content of the defined guide. This research is qualitative descriptive, it contains a case study applied to 22 companies, which carried out a questionnaire to know their status. The guide has a structure as follows: Guidelines, Processes, Procedures, guides, forms, and indicators as a monitoring and traceability tool. Organizations can address this issue and have documented processes that facilitate constant improvement and updating to strengthen the understanding of what should be used and its application. At the end, the conclusions are detailed and what is expected to be done for the future.