Diseño de un modelo de procesos basado en seguridad en profundidad para la protección de datos

Abstract

Abstract: This work presents the design and implementation of a process model based on defense-in-depth for Cisepro C Ltda., aiming to protect its critical data and enhance its security infrastructure. The methodology was based on ISO/IEC 27001, addressing vulnerability analysis, layered defense model design, and comprehensive testing. The layers include policies and procedures, physical and logical perimeter, networks, devices, applications, and data. Technologies employed include next-generation firewalls, multi-factor authentication, advanced encryption, and physical access controls. Results indicate significant improvements in information protection, reduced intrusion risks, and increased network stability. This model provides a scalable and adaptable approach to address current and future threats.