{"id":8926,"date":"2013-10-09T15:43:15","date_gmt":"2013-10-09T14:43:15","guid":{"rendered":"http:\/\/catai.net\/blog\/?p=8926"},"modified":"2013-10-09T15:43:15","modified_gmt":"2013-10-09T14:43:15","slug":"iso-27001-2013-nueva-norma-seguridad","status":"publish","type":"post","link":"https:\/\/catai.net\/blog\/2013\/10\/iso-27001-2013-nueva-norma-seguridad\/","title":{"rendered":"ISO 27001 :2013 nueva norma seguridad"},"content":{"rendered":"<p>La <a href=\"http:\/\/www.lrqa.es\/Images\/LRQA%20-%20Libro%20Blanco%20de%20la%20nueva%20norma%20ISO%2027001_tcm131-249860.pdf\">ISO 27001 <\/a>y la 27002: 2013 estan a punto de publicarse.<\/p>\n<p>Es de esperar que cuando se establezca la historia clinica electronica unificada en Espa\u00f1a se tenga en consideracion , al igual que cuando se establezca la tarjeta sanitaria unica.<\/p>\n<p><a href=\"https:\/\/catai.net\/blog\/wp-content\/uploads\/2013\/10\/27001-2013b.bmp\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-8927 alignleft\" title=\"27001-2013b\" src=\"https:\/\/catai.net\/blog\/wp-content\/uploads\/2013\/10\/27001-2013b.bmp\" alt=\"\" width=\"390\" height=\"427\" \/><\/a><\/p>\n<p>El est\u00e1ndar ISO-27002 ya no es una referencia normativa para ISO-27001:2013, aunque contin\u00faa consider\u00e1ndose necesario en el desarrollo de la declaraci\u00f3n de aplicabilidad (SOA, por sus siglas en ingl\u00e9s). El est\u00e1ndar<strong> ISO 27000:2013<\/strong> se convierte en una <strong>referencia normativa<\/strong> obligatoria y \u00fanica, ya que contiene todos los nuevos t\u00e9rminos y definiciones en el apartado 3.<\/p>\n<p>LIDERAZGO:<\/p>\n<p>Ajusta la relaci\u00f3n y responsabilidades de la Alta Direcci\u00f3n respecto al SGSI, destacando de manera puntual c\u00f3mo debe demostrar su compromiso, por ejemplo:<\/p>\n<ul>\n<li>Garantizando que los objetivos del SGSI y\u00a0<em>\u201cLa pol\u00edtica de seguridad de la informaci\u00f3n\u201d,\u00a0<\/em>anteriormente definida como\u00a0<em>\u201cPol\u00edtica del SGSI\u201d,\u00a0<\/em>est\u00e9n alineados con los objetivos del negocio.<\/li>\n<li>Garantizando la disponibilidad de los recursos para la implementaci\u00f3n del SGSI (econ\u00f3micos, tecnol\u00f3gicos, etc\u00e9tera).<\/li>\n<li>Garantizando que los roles y responsabilidades claves para la seguridad de la informaci\u00f3n se asignen y se comuniquen adecuadamente.<\/li>\n<li>PLANEACION de la evaluacion de riesgos<\/li>\n<li>\n<ul>\n<li>Se enfoca en el objetivo de identificar los riesgos asociados con la<strong> p\u00e9rdida de la confidencialidad, integridad y disponibilidad de la informaci\u00f3n<\/strong>.<\/li>\n<li>Se adopta el termino de &#8220;Propietario del Riesgo&#8221;<\/li>\n<\/ul>\n<\/li>\n<li>SOPORTE<\/li>\n<ul>\n<li>Se incluye una nueva definici\u00f3n\u00a0<em>\u201cinformaci\u00f3n documentada\u201d<\/em>\u00a0que sustituye a los t\u00e9rminos\u00a0<em>\u201cdocumentos\u201d y \u201cregistros\u201d;<\/em>\u00a0abarca el proceso de documentar, controlar, mantener y conservar la documentaci\u00f3n correspondiente al SGSI.<\/li>\n<li>El proceso de revisi\u00f3n se enfoca en el contenido de los documentos y no en la existencia de un determinado conjunto de estos.<\/li>\n<\/ul>\n<\/ul>\n<p>De todos modos el desarrollo del acceso ubicuo a las informaciones de salud, el uso del BYOD (bring you own device) y la nube obliga a gestionar la seguridad de nivel 3 como corresponde a la seguridad sanitaria de un modo diferente.<\/p>\n<p>Aqui os dejo\u00a0<a href=\"https:\/\/catai.net\/blog\/wp-content\/uploads\/2013\/10\/Privacy-Ubiquitous-health.pdf\">Privacy Ubiquitous health<\/a>, un ejemplo de como gestionar los nuevos riesgos.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>La ISO 27001 y la 27002: 2013 estan a punto de publicarse. Es de esperar que cuando se establezca la historia clinica electronica unificada en Espa\u00f1a se tenga en consideracion , al igual que cuando se establezca la tarjeta sanitaria unica. El est\u00e1ndar ISO-27002 ya no es una referencia normativa para ISO-27001:2013, aunque contin\u00faa consider\u00e1ndose [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"give_campaign_id":0,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[3,40,38,13,28,29,32,9],"tags":[],"class_list":["post-8926","post","type-post","status-publish","format-standard","hentry","category-informes","category-innovacion","category-contratacion-externa","category-phealth","category-sanidad","category-seguridad","category-sociedad_red","category-unesco"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>ISO 27001 :2013 nueva norma seguridad | Telemedicina<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/catai.net\/blog\/2013\/10\/iso-27001-2013-nueva-norma-seguridad\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"ISO 27001 :2013 nueva norma seguridad | Telemedicina\" \/>\n<meta property=\"og:description\" content=\"La ISO 27001 y la 27002: 2013 estan a punto de publicarse. Es de esperar que cuando se establezca la historia clinica electronica unificada en Espa\u00f1a se tenga en consideracion , al igual que cuando se establezca la tarjeta sanitaria unica. El est\u00e1ndar ISO-27002 ya no es una referencia normativa para ISO-27001:2013, aunque contin\u00faa consider\u00e1ndose [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/catai.net\/blog\/2013\/10\/iso-27001-2013-nueva-norma-seguridad\/\" \/>\n<meta property=\"og:site_name\" content=\"Telemedicina\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/unesco.telemedicine\" \/>\n<meta property=\"article:published_time\" content=\"2013-10-09T14:43:15+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/catai.net\/blog\/wp-content\/uploads\/2013\/10\/27001-2013b.bmp\" \/>\n<meta name=\"author\" content=\"Catai Blog Telemedicina\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@UnescoTeleMed\" \/>\n<meta name=\"twitter:site\" content=\"@UnescoTeleMed\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Catai Blog Telemedicina\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/catai.net\\\/blog\\\/2013\\\/10\\\/iso-27001-2013-nueva-norma-seguridad\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/catai.net\\\/blog\\\/2013\\\/10\\\/iso-27001-2013-nueva-norma-seguridad\\\/\"},\"author\":{\"name\":\"Catai Blog Telemedicina\",\"@id\":\"https:\\\/\\\/catai.net\\\/blog\\\/#\\\/schema\\\/person\\\/b30eb34cb987e56fbcab4d73f43176b9\"},\"headline\":\"ISO 27001 :2013 nueva norma seguridad\",\"datePublished\":\"2013-10-09T14:43:15+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/catai.net\\\/blog\\\/2013\\\/10\\\/iso-27001-2013-nueva-norma-seguridad\\\/\"},\"wordCount\":349,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/catai.net\\\/blog\\\/2013\\\/10\\\/iso-27001-2013-nueva-norma-seguridad\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/catai.net\\\/blog\\\/wp-content\\\/uploads\\\/2013\\\/10\\\/27001-2013b.bmp\",\"articleSection\":[\"Informes\",\"Innovacion\",\"Outsourcing\",\"pHealth\",\"Sanidad\",\"Seguridad\",\"Sociedad Red\",\"UNESCO\"],\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/catai.net\\\/blog\\\/2013\\\/10\\\/iso-27001-2013-nueva-norma-seguridad\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/catai.net\\\/blog\\\/2013\\\/10\\\/iso-27001-2013-nueva-norma-seguridad\\\/\",\"url\":\"https:\\\/\\\/catai.net\\\/blog\\\/2013\\\/10\\\/iso-27001-2013-nueva-norma-seguridad\\\/\",\"name\":\"ISO 27001 :2013 nueva norma seguridad | Telemedicina\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/catai.net\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/catai.net\\\/blog\\\/2013\\\/10\\\/iso-27001-2013-nueva-norma-seguridad\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/catai.net\\\/blog\\\/2013\\\/10\\\/iso-27001-2013-nueva-norma-seguridad\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/catai.net\\\/blog\\\/wp-content\\\/uploads\\\/2013\\\/10\\\/27001-2013b.bmp\",\"datePublished\":\"2013-10-09T14:43:15+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/catai.net\\\/blog\\\/#\\\/schema\\\/person\\\/b30eb34cb987e56fbcab4d73f43176b9\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/catai.net\\\/blog\\\/2013\\\/10\\\/iso-27001-2013-nueva-norma-seguridad\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/catai.net\\\/blog\\\/2013\\\/10\\\/iso-27001-2013-nueva-norma-seguridad\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/catai.net\\\/blog\\\/2013\\\/10\\\/iso-27001-2013-nueva-norma-seguridad\\\/#primaryimage\",\"url\":\"https:\\\/\\\/catai.net\\\/blog\\\/wp-content\\\/uploads\\\/2013\\\/10\\\/27001-2013b.bmp\",\"contentUrl\":\"https:\\\/\\\/catai.net\\\/blog\\\/wp-content\\\/uploads\\\/2013\\\/10\\\/27001-2013b.bmp\",\"width\":650,\"height\":712},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/catai.net\\\/blog\\\/2013\\\/10\\\/iso-27001-2013-nueva-norma-seguridad\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/catai.net\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"ISO 27001 :2013 nueva norma seguridad\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/catai.net\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/catai.net\\\/blog\\\/\",\"name\":\"Telemedicina\",\"description\":\"Catedra UNESCO 1999-2017. ASOCIACION CATAI (Centro Alta Tecnologia Analisis Imagen).\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/catai.net\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/catai.net\\\/blog\\\/#\\\/schema\\\/person\\\/b30eb34cb987e56fbcab4d73f43176b9\",\"name\":\"Catai Blog Telemedicina\",\"sameAs\":[\"http:\\\/\\\/www.catai.net\\\/blog\",\"https:\\\/\\\/en.wikipedia.org\\\/wiki\\\/UNESCO_Chair_in_Telemedicine\"],\"url\":\"https:\\\/\\\/catai.net\\\/blog\\\/author\\\/admincatai\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"ISO 27001 :2013 nueva norma seguridad | Telemedicina","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/catai.net\/blog\/2013\/10\/iso-27001-2013-nueva-norma-seguridad\/","og_locale":"es_ES","og_type":"article","og_title":"ISO 27001 :2013 nueva norma seguridad | Telemedicina","og_description":"La ISO 27001 y la 27002: 2013 estan a punto de publicarse. Es de esperar que cuando se establezca la historia clinica electronica unificada en Espa\u00f1a se tenga en consideracion , al igual que cuando se establezca la tarjeta sanitaria unica. El est\u00e1ndar ISO-27002 ya no es una referencia normativa para ISO-27001:2013, aunque contin\u00faa consider\u00e1ndose [&hellip;]","og_url":"https:\/\/catai.net\/blog\/2013\/10\/iso-27001-2013-nueva-norma-seguridad\/","og_site_name":"Telemedicina","article_publisher":"https:\/\/www.facebook.com\/unesco.telemedicine","article_published_time":"2013-10-09T14:43:15+00:00","og_image":[{"url":"https:\/\/catai.net\/blog\/wp-content\/uploads\/2013\/10\/27001-2013b.bmp","type":"","width":"","height":""}],"author":"Catai Blog Telemedicina","twitter_card":"summary_large_image","twitter_creator":"@UnescoTeleMed","twitter_site":"@UnescoTeleMed","twitter_misc":{"Escrito por":"Catai Blog Telemedicina","Tiempo de lectura":"2 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/catai.net\/blog\/2013\/10\/iso-27001-2013-nueva-norma-seguridad\/#article","isPartOf":{"@id":"https:\/\/catai.net\/blog\/2013\/10\/iso-27001-2013-nueva-norma-seguridad\/"},"author":{"name":"Catai Blog Telemedicina","@id":"https:\/\/catai.net\/blog\/#\/schema\/person\/b30eb34cb987e56fbcab4d73f43176b9"},"headline":"ISO 27001 :2013 nueva norma seguridad","datePublished":"2013-10-09T14:43:15+00:00","mainEntityOfPage":{"@id":"https:\/\/catai.net\/blog\/2013\/10\/iso-27001-2013-nueva-norma-seguridad\/"},"wordCount":349,"commentCount":0,"image":{"@id":"https:\/\/catai.net\/blog\/2013\/10\/iso-27001-2013-nueva-norma-seguridad\/#primaryimage"},"thumbnailUrl":"https:\/\/catai.net\/blog\/wp-content\/uploads\/2013\/10\/27001-2013b.bmp","articleSection":["Informes","Innovacion","Outsourcing","pHealth","Sanidad","Seguridad","Sociedad Red","UNESCO"],"inLanguage":"es","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/catai.net\/blog\/2013\/10\/iso-27001-2013-nueva-norma-seguridad\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/catai.net\/blog\/2013\/10\/iso-27001-2013-nueva-norma-seguridad\/","url":"https:\/\/catai.net\/blog\/2013\/10\/iso-27001-2013-nueva-norma-seguridad\/","name":"ISO 27001 :2013 nueva norma seguridad | Telemedicina","isPartOf":{"@id":"https:\/\/catai.net\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/catai.net\/blog\/2013\/10\/iso-27001-2013-nueva-norma-seguridad\/#primaryimage"},"image":{"@id":"https:\/\/catai.net\/blog\/2013\/10\/iso-27001-2013-nueva-norma-seguridad\/#primaryimage"},"thumbnailUrl":"https:\/\/catai.net\/blog\/wp-content\/uploads\/2013\/10\/27001-2013b.bmp","datePublished":"2013-10-09T14:43:15+00:00","author":{"@id":"https:\/\/catai.net\/blog\/#\/schema\/person\/b30eb34cb987e56fbcab4d73f43176b9"},"breadcrumb":{"@id":"https:\/\/catai.net\/blog\/2013\/10\/iso-27001-2013-nueva-norma-seguridad\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/catai.net\/blog\/2013\/10\/iso-27001-2013-nueva-norma-seguridad\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/catai.net\/blog\/2013\/10\/iso-27001-2013-nueva-norma-seguridad\/#primaryimage","url":"https:\/\/catai.net\/blog\/wp-content\/uploads\/2013\/10\/27001-2013b.bmp","contentUrl":"https:\/\/catai.net\/blog\/wp-content\/uploads\/2013\/10\/27001-2013b.bmp","width":650,"height":712},{"@type":"BreadcrumbList","@id":"https:\/\/catai.net\/blog\/2013\/10\/iso-27001-2013-nueva-norma-seguridad\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/catai.net\/blog\/"},{"@type":"ListItem","position":2,"name":"ISO 27001 :2013 nueva norma seguridad"}]},{"@type":"WebSite","@id":"https:\/\/catai.net\/blog\/#website","url":"https:\/\/catai.net\/blog\/","name":"Telemedicina","description":"Catedra UNESCO 1999-2017. ASOCIACION CATAI (Centro Alta Tecnologia Analisis Imagen).","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/catai.net\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Person","@id":"https:\/\/catai.net\/blog\/#\/schema\/person\/b30eb34cb987e56fbcab4d73f43176b9","name":"Catai Blog Telemedicina","sameAs":["http:\/\/www.catai.net\/blog","https:\/\/en.wikipedia.org\/wiki\/UNESCO_Chair_in_Telemedicine"],"url":"https:\/\/catai.net\/blog\/author\/admincatai\/"}]}},"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pa6HzH-2jY","jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/catai.net\/blog\/wp-json\/wp\/v2\/posts\/8926","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/catai.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/catai.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/catai.net\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/catai.net\/blog\/wp-json\/wp\/v2\/comments?post=8926"}],"version-history":[{"count":4,"href":"https:\/\/catai.net\/blog\/wp-json\/wp\/v2\/posts\/8926\/revisions"}],"predecessor-version":[{"id":8932,"href":"https:\/\/catai.net\/blog\/wp-json\/wp\/v2\/posts\/8926\/revisions\/8932"}],"wp:attachment":[{"href":"https:\/\/catai.net\/blog\/wp-json\/wp\/v2\/media?parent=8926"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/catai.net\/blog\/wp-json\/wp\/v2\/categories?post=8926"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/catai.net\/blog\/wp-json\/wp\/v2\/tags?post=8926"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}