Guía de ciberseguridad para arquitectura empresarial

Abstract

Abstract: Cybersecurity within their approaches are mainly the care and protection of the confidentiality, integrity and availability of information systems that implemented on an enterprise architecture (EA), it helps to have an overview of the components to strengthen and prioritize . This guide proposes a set of grouped for each phase of ADM (architecture domain model) the framework of TOGAF, specializing in the construction and maintenance of AE, where AE principles involved activities: business architecture, architecture data, application architecture, and technology architecture. At each stage of the guide involved activities that provide the information necessary for execution, along with standards and frameworks such as ISO 27001, ISO 27032, COBIT 5 (Transforming cybersecurity using COBIT 5) and NIST (Framework for improving critical infrastructure cyber security), and a set of templates for each activity to the collection of information. The guide is complimented by a web application, which validates the implementation of cybersecurity activities within a business environment.