Information security and privacy in Management Information Systems (Review)

Abstract

Information security in management information systems involves protecting a company's important and private data, implementing organizational and legal measures and techniques to guarantee the confidentiality, integrity, and availability of information, as well as compliance with privacy laws and regulations. This is done to prevent misuse, unauthorized access, interruption, or destruction of information; in other words, it focuses on ensuring that information remains confidential. This study aims to analyze information security and privacy in Management Information Systems. The methodology employs a qualitative approach through a bibliographic review of scientific articles, journals, theses, and websites. The results of this research show that information security and privacy in management information systems are fundamental to protecting information and preventing its misuse. The study identified the existence of standards such as ISO/IEC and the Organic Law on the Protection of Personal Data, which can guide protection efforts, as well as measures based on risk analysis. This study also demonstrates a close relationship between risk, privacy, and regulations, as these elements work together to ensure responsible, secure, and efficient information management within organizations.