Evaluating informatics security in an organization: The minimal distance method

Abstract

This work presents a methodology for evaluating informatics security in any kind of organization. We use the ISO-27002/2013 standard and the Mexican equivalent NMX-I27002.NYCE-2009 as basis to follow. The standards stablish fourteen controls: human factors, technological, process, and legal controls. The organization must choose adequate controls for it, then It can use the ”Minimal Distance Method to the ideal” to evaluate its Informatics Security. The method allows customize an ideal point for n parameters to evaluate and each organization can define its own ideal point to reach.