Diseño de Metodología para la Gestión de la Seguridad de la información en el Cloud Computing para Universidades Públicas

Abstract

The major benefits of cloud computing have enabled the acquisition of computer resources in a fast, flexible and lower cost of deployment for public universities that require coverage of their IT needs in question, however, the benefits are overshadowed by the lack of security procedures to deal adequately university information that is transferred to a cloud that is exposed to security risks of the information specific to a cloud computing environment. In this context, we present the design of a Methodology for the Management of Information Security in the Cloud Computing for Public Universities, as a solution to meet the need for procedures to properly manage information security in an environment cloud, the methodology was performed according to ISO/IEC 27001:2005 Information technology-Security techniques Information security management system requirements and safety recommendations aimed at information cloud computing environments, therefore we achieved a methodology with appropriate procedures for managing security information from universities that adopt cloud computing services.