Especialización en Auditoría de Sistemas (Virtual) · 2026
La Auditoría de políticas de seguridad de la información en las estaciones de peaje del contrato 1702-2021 de INVIAS. ¿valor agregado o requisito contractual?
Solo ficha. El repositorio marca este trabajo como «Acceso abierto»: el PDF no es público, así que aquí no hay texto para leer. Ver la ficha en el repositorio.
Resumen
This article examines the value contributed by the test plan used by the systems audit area of the oversight body in the toll stations of contract 1702-2021 of INVIAS. The analysis focuses on understanding the contribution that these tests make to the management of information security policies, particularly within the technological systems that process traffic and toll collection data. To achieve this, the test formats included in the audit plan are reviewed and contrasted with the contractual obligations related to information security, as well as with the specialized recommendations provided by the COBIT and ISO 27001 frameworks. Through this comparative assessment, the study seeks to determine whether the tests offer a meaningful contribution to the management of information security policies or whether their scope is limited to verifying contractual compliance.