Automated Model for the Generation of Backup Management Instructions in AWS Based on ISO/IEC 27001:2022 Using GPT-4o-mini for Companies in Metropolitan Lima

Flores A.R.; Lopez P.; Barrientos A. · CISCI - Conferencia Iberoamericana en Sistemas, Cibernetica e Informatica (2025) · DOI: 10.54808/cisci2025.01.337

Resumen

This paper presents the development of an automated system for generating documentation related to information security, specifically focused on policies, procedures, and backup instructions, in accordance with the guidelines of ISO/IEC 27001:2022. The proposed solution leverages automation tools via Make.com and OpenAI language models, enabling the transformation of data collected through a user-facing form into customized documents tailored to each organization's context. The workflow is designed so that the user interacts solely through a form, from which the system automatically determines which documents should be generated based on applicable technical and regulatory criteria. The architecture includes a conditional filtering mechanism for optional documents, email notifications, and final delivery in PDF format. This solution aims to significantly reduce documentation preparation time, enhance regulatory alignment, and facilitate the implementation of security controls in corporate environments.

Instituciones: Universidad Peruana de Ciencias Aplicadas