{"id":73,"date":"2026-08-18T10:27:25","date_gmt":"2026-08-18T10:27:25","guid":{"rendered":"https:\/\/proskurnya.com\/es\/iso-27001-paso-a-paso\/"},"modified":"2026-08-18T10:27:25","modified_gmt":"2026-08-18T10:27:25","slug":"iso-27001-paso-a-paso","status":"publish","type":"post","link":"https:\/\/proskurnya.com\/es\/iso-27001-paso-a-paso\/","title":{"rendered":"ISO 27001: el camino paso a paso hasta el certificado en 4\u20136 meses"},"content":{"rendered":"<p>La ISO 27001 es la norma m\u00e1s demandada por las empresas de TI con clientes internacionales: es la que m\u00e1s exigen los clientes enterprise. Aqu\u00ed el camino hasta el certificado tal como es en los proyectos reales \u2014 no en la teor\u00eda.<\/p>\n<h2>Paso 1. Defina el alcance<\/h2>\n<p>La primera decisi\u00f3n: certificar toda la empresa o un \u00e1rea (por ejemplo, el desarrollo para clientes externos). Un alcance estrecho abarata el proyecto \u2014 pero si el cliente trabaja con un equipo fuera del alcance, el certificado no le convencer\u00e1.<\/p>\n<h2>Paso 2. Evaluaci\u00f3n de riesgos<\/h2>\n<p>El coraz\u00f3n de la ISO 27001 es la gesti\u00f3n de riesgos de seguridad de la informaci\u00f3n. Construya el inventario de activos (datos, sistemas, personas, proveedores), identifique amenazas y vulnerabilidades, eval\u00fae probabilidad e impacto. De ah\u00ed nacen el Plan de Tratamiento de Riesgos y la Declaraci\u00f3n de Aplicabilidad (SoA) con los controles del Anexo A.<\/p>\n<h2>Paso 3. Documentaci\u00f3n e implementaci\u00f3n<\/h2>\n<p>El m\u00ednimo: pol\u00edtica de seguridad, metodolog\u00eda de riesgos, SoA, procesos de incidentes, accesos, cambios y proveedores, plan de continuidad. Pero los documentos son solo la mitad: los controles deben funcionar de verdad. El auditor revisar\u00e1 registros de accesos, incidentes y formaci\u00f3n.<\/p>\n<h2>Paso 4. Auditor\u00eda interna y revisi\u00f3n por la direcci\u00f3n<\/h2>\n<p>Antes de la auditor\u00eda de certificaci\u00f3n, la norma exige una auditor\u00eda interna y una revisi\u00f3n por la direcci\u00f3n. C\u00f3mo prepararse \u2014 en el <a href=\"https:\/\/proskurnya.com\/es\/auditoria-interna-checklist\/\">checklist de auditor\u00eda interna<\/a>; las no conformidades encontradas ci\u00e9rrelas antes \u2014 <a href=\"https:\/\/proskurnya.com\/es\/no-conformidades-comunes-iso-27001\/\">estas son las m\u00e1s comunes<\/a>.<\/p>\n<h2>Paso 5. Auditor\u00eda de certificaci\u00f3n<\/h2>\n<p>Fase 1 \u2014 documentaci\u00f3n y preparaci\u00f3n; Fase 2 \u2014 verificaci\u00f3n pr\u00e1ctica. Corregidos los hallazgos, el organismo emite el certificado por 3 a\u00f1os, seguido de auditor\u00edas de seguimiento anuales.<\/p>\n<h2>Plazos realistas<\/h2>\n<ul>\n<li>Hasta 50 personas: 3\u20134 meses hasta la Fase 1;<\/li>\n<li>50\u2013200 personas: 4\u20136 meses;<\/li>\n<li>m\u00e1s de 200 \u2014 desde 6 meses, seg\u00fan la madurez de los procesos.<\/li>\n<\/ul>\n<h3>Lea tambi\u00e9n<\/h3>\n<ul>\n<li><a href=\"https:\/\/proskurnya.com\/es\/certificacion-iso-guia-completa\/\">Certificaci\u00f3n ISO: la gu\u00eda completa<\/a><\/li>\n<li><a href=\"https:\/\/proskurnya.com\/es\/auditoria-interna-checklist\/\">Auditor\u00eda interna: checklist<\/a><\/li>\n<li><a href=\"https:\/\/proskurnya.com\/es\/no-conformidades-comunes-iso-27001\/\">No conformidades comunes en la auditor\u00eda<\/a><\/li>\n<\/ul>\n<hr \/>\n<p><em>Autor \u2014 <strong>Kyrylo Proskurnya<\/strong>, Auditor Jefe ISO y experto internacional en sistemas de gesti\u00f3n. Realizo auditor\u00edas de certificaci\u00f3n y auditor\u00edas internas ISO 27001, ISO 9001, ISO 27701 e ISO 42001 para empresas de Espa\u00f1a, Europa y EE. UU. <a href=\"https:\/\/proskurnya.com\/es\/\">Sobre m\u00ed<\/a> \u00b7 <a href=\"https:\/\/proskurnya.com\/es\/#contacts\">Solicitar una consulta<\/a><\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>C\u00f3mo una empresa de TI llega de cero al certificado ISO 27001: etapas, documentos y plazos realistas. La experiencia del auditor Kyrylo Proskurnya.<\/p>\n","protected":false},"author":1,"featured_media":53,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[3],"tags":[],"class_list":["post-73","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-iso-certificacion"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v21.0 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>ISO 27001: el camino paso a paso hasta el certificado en 4\u20136 meses - Kyrylo Proskurnya \u2014 Auditor ISO<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/proskurnya.com\/es\/iso-27001-paso-a-paso\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"ISO 27001: el camino paso a paso hasta el certificado en 4\u20136 meses - Kyrylo Proskurnya \u2014 Auditor ISO\" \/>\n<meta property=\"og:description\" content=\"C\u00f3mo una empresa de TI llega de cero al certificado ISO 27001: etapas, documentos y plazos realistas. La experiencia del auditor Kyrylo Proskurnya.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/proskurnya.com\/es\/iso-27001-paso-a-paso\/\" \/>\n<meta property=\"og:site_name\" content=\"Kyrylo Proskurnya \u2014 Auditor ISO\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-18T10:27:25+00:00\" \/>\n<meta name=\"author\" content=\"Kyrylo Proskurnya\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kyrylo Proskurnya\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/proskurnya.com\/es\/iso-27001-paso-a-paso\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/proskurnya.com\/es\/iso-27001-paso-a-paso\/\"},\"author\":{\"name\":\"Kyrylo Proskurnya\",\"@id\":\"https:\/\/proskurnya.com\/es\/#\/schema\/person\/de90831d300a16979ab7d11057ef40e6\"},\"headline\":\"ISO 27001: el camino paso a paso hasta el certificado en 4\u20136 meses\",\"datePublished\":\"2026-08-18T10:27:25+00:00\",\"dateModified\":\"2026-08-18T10:27:25+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/proskurnya.com\/es\/iso-27001-paso-a-paso\/\"},\"wordCount\":390,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/proskurnya.com\/es\/#\/schema\/person\/de90831d300a16979ab7d11057ef40e6\"},\"articleSection\":[\"ISO y certificaci\u00f3n\"],\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/proskurnya.com\/es\/iso-27001-paso-a-paso\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/proskurnya.com\/es\/iso-27001-paso-a-paso\/\",\"url\":\"https:\/\/proskurnya.com\/es\/iso-27001-paso-a-paso\/\",\"name\":\"ISO 27001: el camino paso a paso hasta el certificado en 4\u20136 meses - Kyrylo Proskurnya \u2014 Auditor ISO\",\"isPartOf\":{\"@id\":\"https:\/\/proskurnya.com\/es\/#website\"},\"datePublished\":\"2026-08-18T10:27:25+00:00\",\"dateModified\":\"2026-08-18T10:27:25+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/proskurnya.com\/es\/iso-27001-paso-a-paso\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/proskurnya.com\/es\/iso-27001-paso-a-paso\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/proskurnya.com\/es\/iso-27001-paso-a-paso\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/proskurnya.com\/es\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"ISO 27001: el camino paso a paso hasta el certificado en 4\u20136 meses\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/proskurnya.com\/es\/#website\",\"url\":\"https:\/\/proskurnya.com\/es\/\",\"name\":\"Kyrylo Proskurnya\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/proskurnya.com\/es\/#\/schema\/person\/de90831d300a16979ab7d11057ef40e6\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/proskurnya.com\/es\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"es\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/proskurnya.com\/es\/#\/schema\/person\/de90831d300a16979ab7d11057ef40e6\",\"name\":\"Kyrylo Proskurnya\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\/\/proskurnya.com\/es\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/proskurnya.com\/es\/wp-content\/uploads\/sites\/6\/2026\/08\/Untitled-design-8.png\",\"contentUrl\":\"https:\/\/proskurnya.com\/es\/wp-content\/uploads\/sites\/6\/2026\/08\/Untitled-design-8.png\",\"width\":260,\"height\":260,\"caption\":\"Kyrylo Proskurnya\"},\"logo\":{\"@id\":\"https:\/\/proskurnya.com\/es\/#\/schema\/person\/image\/\"},\"sameAs\":[\"https:\/\/proskurnya.com\"],\"url\":\"https:\/\/proskurnya.com\/es\/author\/proskurnya-admin\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"ISO 27001: el camino paso a paso hasta el certificado en 4\u20136 meses - Kyrylo Proskurnya \u2014 Auditor ISO","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/proskurnya.com\/es\/iso-27001-paso-a-paso\/","og_locale":"es_ES","og_type":"article","og_title":"ISO 27001: el camino paso a paso hasta el certificado en 4\u20136 meses - Kyrylo Proskurnya \u2014 Auditor ISO","og_description":"C\u00f3mo una empresa de TI llega de cero al certificado ISO 27001: etapas, documentos y plazos realistas. La experiencia del auditor Kyrylo Proskurnya.","og_url":"https:\/\/proskurnya.com\/es\/iso-27001-paso-a-paso\/","og_site_name":"Kyrylo Proskurnya \u2014 Auditor ISO","article_published_time":"2026-08-18T10:27:25+00:00","author":"Kyrylo Proskurnya","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Kyrylo Proskurnya","Est. reading time":"2 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/proskurnya.com\/es\/iso-27001-paso-a-paso\/#article","isPartOf":{"@id":"https:\/\/proskurnya.com\/es\/iso-27001-paso-a-paso\/"},"author":{"name":"Kyrylo Proskurnya","@id":"https:\/\/proskurnya.com\/es\/#\/schema\/person\/de90831d300a16979ab7d11057ef40e6"},"headline":"ISO 27001: el camino paso a paso hasta el certificado en 4\u20136 meses","datePublished":"2026-08-18T10:27:25+00:00","dateModified":"2026-08-18T10:27:25+00:00","mainEntityOfPage":{"@id":"https:\/\/proskurnya.com\/es\/iso-27001-paso-a-paso\/"},"wordCount":390,"commentCount":0,"publisher":{"@id":"https:\/\/proskurnya.com\/es\/#\/schema\/person\/de90831d300a16979ab7d11057ef40e6"},"articleSection":["ISO y certificaci\u00f3n"],"inLanguage":"es","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/proskurnya.com\/es\/iso-27001-paso-a-paso\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/proskurnya.com\/es\/iso-27001-paso-a-paso\/","url":"https:\/\/proskurnya.com\/es\/iso-27001-paso-a-paso\/","name":"ISO 27001: el camino paso a paso hasta el certificado en 4\u20136 meses - Kyrylo Proskurnya \u2014 Auditor ISO","isPartOf":{"@id":"https:\/\/proskurnya.com\/es\/#website"},"datePublished":"2026-08-18T10:27:25+00:00","dateModified":"2026-08-18T10:27:25+00:00","breadcrumb":{"@id":"https:\/\/proskurnya.com\/es\/iso-27001-paso-a-paso\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/proskurnya.com\/es\/iso-27001-paso-a-paso\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/proskurnya.com\/es\/iso-27001-paso-a-paso\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/proskurnya.com\/es\/"},{"@type":"ListItem","position":2,"name":"ISO 27001: el camino paso a paso hasta el certificado en 4\u20136 meses"}]},{"@type":"WebSite","@id":"https:\/\/proskurnya.com\/es\/#website","url":"https:\/\/proskurnya.com\/es\/","name":"Kyrylo Proskurnya","description":"","publisher":{"@id":"https:\/\/proskurnya.com\/es\/#\/schema\/person\/de90831d300a16979ab7d11057ef40e6"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/proskurnya.com\/es\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"es"},{"@type":["Person","Organization"],"@id":"https:\/\/proskurnya.com\/es\/#\/schema\/person\/de90831d300a16979ab7d11057ef40e6","name":"Kyrylo Proskurnya","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/proskurnya.com\/es\/#\/schema\/person\/image\/","url":"https:\/\/proskurnya.com\/es\/wp-content\/uploads\/sites\/6\/2026\/08\/Untitled-design-8.png","contentUrl":"https:\/\/proskurnya.com\/es\/wp-content\/uploads\/sites\/6\/2026\/08\/Untitled-design-8.png","width":260,"height":260,"caption":"Kyrylo Proskurnya"},"logo":{"@id":"https:\/\/proskurnya.com\/es\/#\/schema\/person\/image\/"},"sameAs":["https:\/\/proskurnya.com"],"url":"https:\/\/proskurnya.com\/es\/author\/proskurnya-admin\/"}]}},"_links":{"self":[{"href":"https:\/\/proskurnya.com\/es\/wp-json\/wp\/v2\/posts\/73","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/proskurnya.com\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/proskurnya.com\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/proskurnya.com\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/proskurnya.com\/es\/wp-json\/wp\/v2\/comments?post=73"}],"version-history":[{"count":0,"href":"https:\/\/proskurnya.com\/es\/wp-json\/wp\/v2\/posts\/73\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/proskurnya.com\/es\/wp-json\/wp\/v2\/media\/53"}],"wp:attachment":[{"href":"https:\/\/proskurnya.com\/es\/wp-json\/wp\/v2\/media?parent=73"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/proskurnya.com\/es\/wp-json\/wp\/v2\/categories?post=73"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/proskurnya.com\/es\/wp-json\/wp\/v2\/tags?post=73"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}