Implications of the NTP ISO / IEC 27001: 2008 EDI, on information security in the Peruvian state ministries

Abstract

At present, the use of information and communication technologies have become the main support for both private and public business processes, including the daily life of citizens. In this sense, the Peruvian State through the National Electronic Government Office (ONGEI) prioritizes the strengthening of the Information society through a plan called Agenda Peru. To verify whether the implementation of the standard has allowed the improvement of information security in the Ministries of the Peruvian State, a quantitative correlational investigation of a non-experimental and cross-sectional type was carried out, determining the degree of implementation of the standard and the level of incidents of Information security in the selected population, which for the purpose of the study were 18 ministries and the Presidency of the Council of Ministers. The result indicated a negative correlation coefficient of -.636 and a significance of .003; Determining the level of implementation of the standard in the ministries is 2.83, being at the planning level with respect to five levels of incremental implementation (organization, planning, deployment, review and consolidation) proposed by the ONGEI.