LA GESTIÓN DEL CAMBIO TECNOLÓGICO DE LA SEGURIDAD INFORMÁTICA EN EL IPN: LA DIRECCIÓN DE CÓMPUTO Y COMUNICACIONES (DCYC) COMO CASO DE ESTUDIO

Abstract

This thesis reviews the current situation of the information security policies that are applied in Mexico. It aims at reviewing the management of technological change in the computer security area of the National Polytechnic Institute (IPN). In order to do this, the Department of Computing and Communications (DCYC) of the IPN is used as a case study. The policies for managing IT risk in the IPN are matters covered by the Organic Law of the Institute and its internal regulations, which set the rules, controls and procedures to standardize how the institute warns, protects and mitigates security risks at all levels of operation. However, in order to have a proper implementation of the mechanisms for information risk management at IPN several organizational changes are required to accept, and even speed up the adoption of elements aimed at the prevention of computer risks. In particular, this thesis reviews the situation of the management of technological change in the area of computer security in the IPN with reference to the DCYC. Finally, the thesis also presents a series of recommendations stemming from the DCYC organizational analysis in order to improve the management of the information security in the IPN.