📋 Tender Overview
To help safeguard the information data commercial operations andor electronic transactions of the organizations the National Quality Institute INACAL an agency attached to the Ministry of Production approved the Peruvian Technical Standard NTP-ISOIEC 27031 Information Technology. Security techniques. 1st Edition which provides guidance for the proper implementation of Information and Communication Technologies ICT with the aim of ensuring the continuity of the business of companies.This white paper is applicable to any private organization public and non-governmental institutions regardless of size nature or sector. Describes methods principles and processes to identify and specify aspects related to performance criteria design and implementation of a program of adaptation and management of ICT in organizations in order to improve their services and technological infrastructure to support business operations in the event of new events and incidents and related interruptions that may affect computer security such as viruses or malwares.The pandemic has accelerated the increase in the use of digital tools making ICT a key and indispensable element for survival not only for companies but also for public institutions therefore this technical standard will allow to have an information and communication technology prepared to guarantee a policy of continuity of their commercial operations as well as the activities provided by the State said Clara Glvez executive president of Inacal.Likewise he pointed out that the application of this technical document will allow identifying possible threats and implementing computer security processes and controls managing risks effectively within the framework of the progress of digital government that our country requires.Benefits of the application of the ICT technical standard NTP-ISOIEC 27031 describes the fundamental concepts and principles of ICTpreparation for incident prevention that allows protection against threats environmental and hardware failures operational errors malicious attacks and natural disasters Early detection of incidents to minimize the impact on services and preserve their quality.In addition the ability to respond to an incident information retrieval to be more efficient and minimize downtime identify and implement the appropriate recovery strategy that can ensure timely resumption of services and maintain data integrity and events large and small should be documented analyzed and reviewed in order to allow the organization to better prepare to control and avoid disruptions.It also provides the key elements for the proper implementation of ICT such as having competent personnel use of technologies hardware network software application and voice data processes to describe the configuration operation recovery and effective maintenance of ICT resources and suppliers for the provision of ICT service.Also this document incorporatesora activities for the application of ICT such as planning establishing business continuity policies establishing objectives and metrics doing implementing the policy already defined in the ICT department of the company verifying to constantly monitor and evaluate the implementation of the business continuity policy through periodic audits tests and analysis of results and acting to maintain or review in order to achieve continuous improvement over time and prevent any type of disaster.
