Security Measures to Protect Sensitive Information in Software Development Centers

EasyChair Preprint 6598

Abstract

Information is essential within computing assets for any organization, facing numerous internal and external security threats on a daily basis, jeopardizing its integrity, availability and confidentiality. In Cuban entities, such as companies and universities, these threats are present in their areas, including the software development centers. All these locations have Computer Security Management Systems (ISMS) implemented based on current security regulations, but do not fully cover the protection of critical information. For this work, an assessment was made of the state of computer security and of the risks to computer assets that need to be protected for the selection of specific security controls. The objective of this research is to make a proposal of computer security measures for the protection of sensitive information in software development centers, based on the elements obtained from the ISO/IEC 27000 standards family and decrees and regulations governing computer security in Cuba.

Keyphrases: Protección, Seguridad Informática, centros de desarrollo de software, información sensible, medidas de seguridad informática

@booklet{EasyChair:6598,
  author    = {Michel James Navarro},
  title     = {Security Measures to Protect Sensitive Information in Software Development Centers},
  howpublished = {EasyChair Preprint 6598},
  year      = {EasyChair, 2021}}