ISO 27001 for Information Security Management: A Systematic Review in Latin America

Hinostroza L.A.S.; Medina I.H.I.; Olivos G.S.M. · Proceedings of the LACCEI international Multi-conference for Engineering, Education and Technology (2024) · DOI: 10.18687/leird2024.1.1.584

Resumen

The main objetive of the research was to carry out a systematic review of the literature from 2013-2024, with the purpose of evaluating the effectiveness of the implementation of ISO 27001 in Latin American corporations to mitigate exposures to hazards in the protection of the information. The PRISMA methodology was used to search and select sources such as: Dialnet, Google Scholar, IEEE Xplore, Redalyc, Scielo and Scopus. Initially, 19,000 results were generated, which were reduced to 886 studies after the implementation of search strategies. Then, by applying selection and discard criteria, 23 articles were chosen for evaluation. Consequently, the bibliometric results showed that the studies were published in a greater number in 2022, English language and 46% refer to Scopus. Among the main tools identified we can mention: ISO 27001, PDCA, software, among others. The main effect identified was the reduction of data protection incidents, regulatory compliance, as well as the cost of implementation. Finally, it can be concluded that there are results between 2013-2024 that demonstrate the implementation of the regulations.

Instituciones: Universidad Privada del Norte