Evaluation of information security management in management information systems as a tool of competitiveness in companies of non-destructive testing services in the city of Lima – Peru

Abstract

The objetive of this article is to carry out an evaluation of the way in which information security is managed based on the International Standard ISO 27001: 2013 in management information systems in a group of testing services companies. operating in Lima-Peru. The study was developed based on a descriptive and documentary field research, in which the qualitative and quantitative research approach is integrated and harmonized. Regarding information collection techniques include: direct observation, analysis of documentary sources and the questionnaire. Among the most outstanding results is that the analysis of the information collected allowed to outline the process of conception and implementation of a management information system, and then from the guidelines prescribed in the international standard ISO 27001 determine the level of compliance with respect to information security, to finally formulate some theoretical reflections in relation to the linkage of information security in management information systems in the group of selected companies. As a relevant conclusion, it was obtained that although the companies participating in the research have made significant advances in the adoption of their management information systems, it has not been the same with the management of information security, which is still considered weak in these companies. which makes them particularly vulnerable.