POLÍTICAS DE SEGURIDAD DE LA INFORMACIÓN: UNA REVISIÓN SISTEMÁTICA DE SU CONCEPTO.

Abstract

The aim of this article is to establish the concept of Information Security Policy (ISP) based on its classificaction, features and objectives through a systematic review taking as reference the database Web of Knowledge between the years 2006 and 2016. Findings define ISP as documents or mechanisms which specifies rules and involve human and tecnological aspects, it focuses in information security and information secuirty management. As future work the same research can be executed, but in non structured databases using tecnological survilliance Techniques. The obtained results could be compared with the definition of this research and establish the concordance level between IT auditing companies and the academia.