Information Security Web System Based on the ISO 27001 Standard: A Case Study in a Construction Company in Lima

Rossi E.G.T.; Huerta R.M.P.; Salas E.A.C. · Proceedings of the International Symposium on Digital Forensics and Security, ISDFS (2026) · DOI: 10.1109/isdfs69419.2026.11458910

Resumen

This project presents the design of a security protocol based on the ISO/IEC 27001 standard, complemented by the development of the SecuPro web system, aimed at automating the management of policies, assets, incidents, and users while promoting regulatory compliance and staff training. The solution, implemented with Node.js and PostgreSQL under modular architecture, was validated by a construction company in Lima through controlled testing and user surveys. The system achieved a 41.67% reduction in operational errors, 92% policy adherence, and an average incident detection time of 57.5 seconds, demonstrating its effectiveness in strengthening ISO 27001-based security management in SMEs.

Instituciones: Universidad Peruana de Ciencias Aplicadas