Law on Transparency implementation process, ISO 27001 and Database Reporting on public entities

Authors

  • Edward Fabián Penagos Granada Universidad Tecnológica de Pereira
  • Ana María López Echeverry Universidad Tecnológica de Pereira
  • Paula Andrea Villa Sánchez Universidad Tecnológica de Pereira

DOI:

https://doi.org/10.18046/syt.v14i39.2348

Keywords:

Training, law on transparency, ISO 27001, information security, database reporting.

Abstract

During 2015 and 2016, in Pereira (Colombia) a training project addressed to public entities officials was carried out  in areas related with: law on transparency, ISO 27001 and database reporting, though theoretical and practical sessions. As a result, a local researching group developed a set of documents with relevant and updated information on each topic. So, officials can use them as implementation guides in their respective institutions. This paper describes how the training sessions was developed. Finally, the results of the project are presented in a positive way, taking as a reference both an initial scenario and final scenario of greater complexity.

Author Biographies

  • Edward Fabián Penagos Granada, Universidad Tecnológica de Pereira
    Computational Systems Engineer from Universidad Tecnológica de Pereira [UTP], Colombia (2014), currently he is pursuing his last semester of the Master in Systems and Computing –emphasis in networks and telecommunications– at the UTP, where also he is a researcher
  • Ana María López Echeverry, Universidad Tecnológica de Pereira
    Electrics Engineer from Universidad Tecnológica de Pereira [UTP], Colombia (1996). At the Universidad Pontificia Bolivariana, Medellín, Colombia, she obtained two degrees: Specialist in Telecommunications (2012) and Master in Engineering (2013). She has thirteen years of experience as professor at the UTP, also she has been evaluator pair in calls about cyber-security, health, tourism, etc. Currently she is a professor at the UTP (Systems and Computing Engineering) and research about: information security, cryptography and advanced communication protocols
  • Paula Andrea Villa Sánchez, Universidad Tecnológica de Pereira
    Computational Systems Engineer (2001), Specialist in Data Networks (2007) and Master in Computing and Systems Engineering –emphasis in Security of Information and Software Quality– (2014) at the Universidad Tecnológica de Pereira [UTP], institution where also she has worked as teacher and researcher

References

Decreto 2573 de 2014. (2014, diciembre 12). Diario Oficial No. 49363. Bogotá, Colombia: Imprenta Nacional.

Decreto 886 de 2014. (2014, mayo 13). Diario Oficial No. 49150. Bogotá, Colombia: Imprenta Nacional.

Delgado, M. (2009). Formación Profesional: la problematización como estrategia didáctica para la intervención profesional pedagógica [paper in “II Coloquio de Investigación educativa UIM FES Acatlán, México]. Available at: http://www.academia.edu/1206743/La_problematización_como_estrategia_didáctica_para_la_intervención

Departamento Nacional de Planeación [DNP] (2014). Guía de caracterización de ciudadanos, usuarios y grupos de interés. Bogotá, Colombia: DNP. Available at: https://colaboracion.dnp.gov.co/CDT/Programa%20Nacional%20del%20Servicio%20al%20Ciudadano/Guia%20de%20Caracterizaci%C3%B3n%20de%20Ciudadanos.pdf

Departamento Nacional de Planeación [DNP]. (2009). Guía Metodológica para la Formulación de Indicadores. Bogotá, Colombia: DNP. Available at: https://www.dnp.gov.co/LinkClick.aspx?fileticket=-hBkmozjehk%3D&tabid=1214

Instituto Colombiano de Normas Técnicas [ICONTEC] (2013). Tecnología de la información. Técnicas de seguridad. Sistemas de gestión de la seguridad de la información. Requisitos. Norma Técnica Colombiana NTC-ISO-IEC 27001. Bogotá, Colombia: ICONTEC.

Ley 1712 de 2014. (2014, marzo 6). Diario Oficial No. 49084. Bogotá, Colombia: Imprenta Nacional.

Ley 1341 de 2009. (2009, julio 30). Diario Oficial No. 47.426. Bogotá, Colombia: Imprenta Nacional.

Más información más derechos [Web site]. (2014). Retrieved from: http://masinformacionmasderechos.co/

Ministerio de las Tecnologías de la Información y las Comunicaciones. (2011). Guía para la caracterización de usuarios de las entidades públicas. Bogotá, Colombia: MinTIC. Available at: http://estrategia.gobiernoenlinea.gov.co/623/articles-8536_recurso_1.pdf

Newman, V. (2015). Datos personales en información pública: oscuridad en lo privado y luz en lo público. Bogotá, Colombia: Dejusticia. Available at: http://www.dejusticia.org/files/r2_actividades_recursos/fi_name_recurso.699.pdf

Organización de los Estados Americanos [OEA].(2010). Ley modelo interamericana sobre acceso a la información pública [CP/CAJP-2840/10]. Available at: https://www.oas.org/dil/esp/CP-CAJP-2840-10_Corr1_esp.pdf

Downloads

Published

2016-12-01

Issue

Vol. 14 No. 39 (2016)

Section

Case Report

License

This journal is licensed under the terms of the CC BY 4.0 licence (https://creativecommons.org/licenses/by/4.0/legalcode).