Propuesta metodológica para la implementación de SGSI basado en ISO 27001:2022 aplicada al proceso “Gestión de Cobranzas” de la empresa Novacobranzas S.A.

Abstract

The purpose of this thesis is to present a methodological proposal for the implementation of an ISMS based on ISO 27001:2022, applying it to the Debt Collection Management process of Novacobranzas. The research addresses the need to improve information security within the company due to the growing exposure to cyberattacks and internal threats. Through a gap analysis, significant deficiencies in the company's security infrastructure were identified, highlighting a lack of adequate controls, documented security policies, and incident response mechanisms. The study also reveals that employees have limited knowledge of computer security, which increases vulnerability to external and internal attacks.