Customized diagnostic tool for the security maturity level of the enterprise information based on ISO/IEC 27001

Abstract

This paper presents the design of a customized digital tool based on the ISO/IEC 27001 to determine the level of maturity of security in information resources in companies. Due to the detailed process established by ISO/IEC 27001, the technological proposal shown in this paper is based on a prioritization process of the security aspects according to the size and line-business of the particular company that wishes to implement the mentioned international standard. After the development of the diagnostic tool, the Beta test was carried out in a company as Early-Adopter in order to improve the complete diagnostic tool.