PROPUESTA DE UN MARCO DE TRABAJO PARA LA EVALUACIÓN DE MADUREZ DE LA GESTIÓN DE SEGURIDAD DE LA INFORMACIÓN EN UN RETAIL DE LA CIUDAD DE GUAYAQUIL

Abstract

The general objective of this article was to design a framework for evaluating the level of maturity of information security management (ISM) in an organization specialized in the mass commercialization of products (RETAIL) in the Guayaquil city to provide evidence that they know the status of their main business processes with relation to information security (IS). The approach is qualitative, with a descriptive scope based on the revision of maturity assessment models in conjunction with ISM standards. The results obtained identify a low level of maturity of the main business processes of the RETAIL.