{"id":92,"date":"2026-08-18T10:32:24","date_gmt":"2026-08-18T10:32:24","guid":{"rendered":"https:\/\/proskurnya.com\/es\/politica-de-seguridad-de-la-informacion\/"},"modified":"2026-08-18T10:32:24","modified_gmt":"2026-08-18T10:32:24","slug":"politica-de-seguridad-de-la-informacion","status":"publish","type":"post","link":"https:\/\/proskurnya.com\/es\/politica-de-seguridad-de-la-informacion\/","title":{"rendered":"Pol\u00edtica de seguridad de la informaci\u00f3n: qu\u00e9 debe contener (y qu\u00e9 no)"},"content":{"rendered":"<p>La pol\u00edtica de seguridad de la informaci\u00f3n es el primer documento que pide el auditor \u2014 y a menudo el peor de la empresa: 40 p\u00e1ginas de texto copiado que nadie ha le\u00eddo. As\u00ed es una pol\u00edtica que funciona.<\/p>\n<h2>Para qu\u00e9 sirve<\/h2>\n<p>La pol\u00edtica es la declaraci\u00f3n de intenciones de la direcci\u00f3n: por qu\u00e9 la seguridad importa, qu\u00e9 objetivos fijamos, qui\u00e9n responde de qu\u00e9. La \u00abconstituci\u00f3n\u00bb del sistema \u2014 los detalles viven en procedimientos de nivel inferior.<\/p>\n<h2>Estructura funcional en 2\u20134 p\u00e1ginas<\/h2>\n<ul>\n<li><strong>Objetivo y compromiso de la direcci\u00f3n<\/strong> \u2014 por qu\u00e9 la seguridad y qu\u00e9 promete la gerencia;<\/li>\n<li><strong>alcance<\/strong> \u2014 a qui\u00e9n y a qu\u00e9 se aplica;<\/li>\n<li><strong>objetivos de seguridad<\/strong> \u2014 medibles, alineados con la estrategia;<\/li>\n<li><strong>roles y responsabilidades<\/strong> \u2014 due\u00f1o del SGSI, due\u00f1os de riesgos, deberes de cada empleado;<\/li>\n<li><strong>principios clave<\/strong> \u2014 privilegio m\u00ednimo, clasificaci\u00f3n de la informaci\u00f3n, reporte de incidentes;<\/li>\n<li><strong>referencias a pol\u00edticas subordinadas<\/strong> \u2014 accesos, contrase\u00f1as, trabajo remoto, proveedores.<\/li>\n<\/ul>\n<h2>Qu\u00e9 no debe contener<\/h2>\n<p>Detalles t\u00e9cnicos (versiones de TLS, configuraci\u00f3n del firewall) \u2014 cambian m\u00e1s r\u00e1pido de lo que se revisa la pol\u00edtica y pertenecen a los procedimientos. Texto de la norma copiado \u2014 el auditor lo reconoce al instante.<\/p>\n<h2>Se\u00f1ales de una pol\u00edtica viva<\/h2>\n<p>Aprobada por la direcci\u00f3n, comunicada al equipo (y la gente sabe resumirla con sus palabras \u2014 lo compruebo en cada auditor\u00eda), revisada anualmente. La lista completa de documentos obligatorios est\u00e1 en el art\u00edculo sobre el <a href=\"https:\/\/proskurnya.com\/es\/documentacion-sgsi-minimo\/\">m\u00ednimo documental<\/a>; c\u00f3mo llegar a las personas, en el de <a href=\"https:\/\/proskurnya.com\/es\/formacion-seguridad-empleados\/\">formaci\u00f3n<\/a>.<\/p>\n<h3>Lea tambi\u00e9n<\/h3>\n<ul>\n<li><a href=\"https:\/\/proskurnya.com\/es\/documentacion-sgsi-minimo\/\">Documentaci\u00f3n del SGSI: el m\u00ednimo<\/a><\/li>\n<li><a href=\"https:\/\/proskurnya.com\/es\/formacion-seguridad-empleados\/\">Formaci\u00f3n de seguridad para empleados<\/a><\/li>\n<li><a href=\"https:\/\/proskurnya.com\/es\/certificacion-iso-guia-completa\/\">Certificaci\u00f3n ISO: la gu\u00eda completa<\/a><\/li>\n<\/ul>\n<hr \/>\n<p><em>Autor \u2014 <strong>Kyrylo Proskurnya<\/strong>, Auditor Jefe ISO y experto internacional en sistemas de gesti\u00f3n. Realizo auditor\u00edas de certificaci\u00f3n y auditor\u00edas internas ISO 27001, ISO 9001, ISO 27701 e ISO 42001 para empresas de Espa\u00f1a, Europa y EE. UU. <a href=\"https:\/\/proskurnya.com\/es\/\">Sobre m\u00ed<\/a> \u00b7 <a href=\"https:\/\/proskurnya.com\/es\/#contacts\">Solicitar una consulta<\/a><\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>C\u00f3mo escribir una pol\u00edtica de seguridad que la gente lea: estructura, extensi\u00f3n, errores t\u00edpicos. Recomendaciones del auditor jefe Kyrylo Proskurnya.<\/p>\n","protected":false},"author":1,"featured_media":52,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[3],"tags":[],"class_list":["post-92","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-iso-certificacion"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v21.0 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Pol\u00edtica de seguridad de la informaci\u00f3n: qu\u00e9 debe contener (y qu\u00e9 no) - Kyrylo Proskurnya \u2014 Auditor ISO<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/proskurnya.com\/es\/politica-de-seguridad-de-la-informacion\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Pol\u00edtica de seguridad de la informaci\u00f3n: qu\u00e9 debe contener (y qu\u00e9 no) - Kyrylo Proskurnya \u2014 Auditor ISO\" \/>\n<meta property=\"og:description\" content=\"C\u00f3mo escribir una pol\u00edtica de seguridad que la gente lea: estructura, extensi\u00f3n, errores t\u00edpicos. Recomendaciones del auditor jefe Kyrylo Proskurnya.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/proskurnya.com\/es\/politica-de-seguridad-de-la-informacion\/\" \/>\n<meta property=\"og:site_name\" content=\"Kyrylo Proskurnya \u2014 Auditor ISO\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-18T10:32:24+00:00\" \/>\n<meta name=\"author\" content=\"Kyrylo Proskurnya\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kyrylo Proskurnya\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/proskurnya.com\/es\/politica-de-seguridad-de-la-informacion\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/proskurnya.com\/es\/politica-de-seguridad-de-la-informacion\/\"},\"author\":{\"name\":\"Kyrylo Proskurnya\",\"@id\":\"https:\/\/proskurnya.com\/es\/#\/schema\/person\/de90831d300a16979ab7d11057ef40e6\"},\"headline\":\"Pol\u00edtica de seguridad de la informaci\u00f3n: qu\u00e9 debe contener (y qu\u00e9 no)\",\"datePublished\":\"2026-08-18T10:32:24+00:00\",\"dateModified\":\"2026-08-18T10:32:24+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/proskurnya.com\/es\/politica-de-seguridad-de-la-informacion\/\"},\"wordCount\":343,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/proskurnya.com\/es\/#\/schema\/person\/de90831d300a16979ab7d11057ef40e6\"},\"articleSection\":[\"ISO y certificaci\u00f3n\"],\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/proskurnya.com\/es\/politica-de-seguridad-de-la-informacion\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/proskurnya.com\/es\/politica-de-seguridad-de-la-informacion\/\",\"url\":\"https:\/\/proskurnya.com\/es\/politica-de-seguridad-de-la-informacion\/\",\"name\":\"Pol\u00edtica de seguridad de la informaci\u00f3n: qu\u00e9 debe contener (y qu\u00e9 no) - Kyrylo Proskurnya \u2014 Auditor ISO\",\"isPartOf\":{\"@id\":\"https:\/\/proskurnya.com\/es\/#website\"},\"datePublished\":\"2026-08-18T10:32:24+00:00\",\"dateModified\":\"2026-08-18T10:32:24+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/proskurnya.com\/es\/politica-de-seguridad-de-la-informacion\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/proskurnya.com\/es\/politica-de-seguridad-de-la-informacion\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/proskurnya.com\/es\/politica-de-seguridad-de-la-informacion\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/proskurnya.com\/es\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Pol\u00edtica de seguridad de la informaci\u00f3n: qu\u00e9 debe contener (y qu\u00e9 no)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/proskurnya.com\/es\/#website\",\"url\":\"https:\/\/proskurnya.com\/es\/\",\"name\":\"Kyrylo Proskurnya\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/proskurnya.com\/es\/#\/schema\/person\/de90831d300a16979ab7d11057ef40e6\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/proskurnya.com\/es\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"es\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/proskurnya.com\/es\/#\/schema\/person\/de90831d300a16979ab7d11057ef40e6\",\"name\":\"Kyrylo Proskurnya\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\/\/proskurnya.com\/es\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/proskurnya.com\/es\/wp-content\/uploads\/sites\/6\/2026\/08\/Untitled-design-8.png\",\"contentUrl\":\"https:\/\/proskurnya.com\/es\/wp-content\/uploads\/sites\/6\/2026\/08\/Untitled-design-8.png\",\"width\":260,\"height\":260,\"caption\":\"Kyrylo Proskurnya\"},\"logo\":{\"@id\":\"https:\/\/proskurnya.com\/es\/#\/schema\/person\/image\/\"},\"sameAs\":[\"https:\/\/proskurnya.com\"],\"url\":\"https:\/\/proskurnya.com\/es\/author\/proskurnya-admin\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Pol\u00edtica de seguridad de la informaci\u00f3n: qu\u00e9 debe contener (y qu\u00e9 no) - Kyrylo Proskurnya \u2014 Auditor ISO","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/proskurnya.com\/es\/politica-de-seguridad-de-la-informacion\/","og_locale":"es_ES","og_type":"article","og_title":"Pol\u00edtica de seguridad de la informaci\u00f3n: qu\u00e9 debe contener (y qu\u00e9 no) - Kyrylo Proskurnya \u2014 Auditor ISO","og_description":"C\u00f3mo escribir una pol\u00edtica de seguridad que la gente lea: estructura, extensi\u00f3n, errores t\u00edpicos. Recomendaciones del auditor jefe Kyrylo Proskurnya.","og_url":"https:\/\/proskurnya.com\/es\/politica-de-seguridad-de-la-informacion\/","og_site_name":"Kyrylo Proskurnya \u2014 Auditor ISO","article_published_time":"2026-08-18T10:32:24+00:00","author":"Kyrylo Proskurnya","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Kyrylo Proskurnya","Est. reading time":"2 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/proskurnya.com\/es\/politica-de-seguridad-de-la-informacion\/#article","isPartOf":{"@id":"https:\/\/proskurnya.com\/es\/politica-de-seguridad-de-la-informacion\/"},"author":{"name":"Kyrylo Proskurnya","@id":"https:\/\/proskurnya.com\/es\/#\/schema\/person\/de90831d300a16979ab7d11057ef40e6"},"headline":"Pol\u00edtica de seguridad de la informaci\u00f3n: qu\u00e9 debe contener (y qu\u00e9 no)","datePublished":"2026-08-18T10:32:24+00:00","dateModified":"2026-08-18T10:32:24+00:00","mainEntityOfPage":{"@id":"https:\/\/proskurnya.com\/es\/politica-de-seguridad-de-la-informacion\/"},"wordCount":343,"commentCount":0,"publisher":{"@id":"https:\/\/proskurnya.com\/es\/#\/schema\/person\/de90831d300a16979ab7d11057ef40e6"},"articleSection":["ISO y certificaci\u00f3n"],"inLanguage":"es","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/proskurnya.com\/es\/politica-de-seguridad-de-la-informacion\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/proskurnya.com\/es\/politica-de-seguridad-de-la-informacion\/","url":"https:\/\/proskurnya.com\/es\/politica-de-seguridad-de-la-informacion\/","name":"Pol\u00edtica de seguridad de la informaci\u00f3n: qu\u00e9 debe contener (y qu\u00e9 no) - Kyrylo Proskurnya \u2014 Auditor ISO","isPartOf":{"@id":"https:\/\/proskurnya.com\/es\/#website"},"datePublished":"2026-08-18T10:32:24+00:00","dateModified":"2026-08-18T10:32:24+00:00","breadcrumb":{"@id":"https:\/\/proskurnya.com\/es\/politica-de-seguridad-de-la-informacion\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/proskurnya.com\/es\/politica-de-seguridad-de-la-informacion\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/proskurnya.com\/es\/politica-de-seguridad-de-la-informacion\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/proskurnya.com\/es\/"},{"@type":"ListItem","position":2,"name":"Pol\u00edtica de seguridad de la informaci\u00f3n: qu\u00e9 debe contener (y qu\u00e9 no)"}]},{"@type":"WebSite","@id":"https:\/\/proskurnya.com\/es\/#website","url":"https:\/\/proskurnya.com\/es\/","name":"Kyrylo Proskurnya","description":"","publisher":{"@id":"https:\/\/proskurnya.com\/es\/#\/schema\/person\/de90831d300a16979ab7d11057ef40e6"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/proskurnya.com\/es\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"es"},{"@type":["Person","Organization"],"@id":"https:\/\/proskurnya.com\/es\/#\/schema\/person\/de90831d300a16979ab7d11057ef40e6","name":"Kyrylo Proskurnya","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/proskurnya.com\/es\/#\/schema\/person\/image\/","url":"https:\/\/proskurnya.com\/es\/wp-content\/uploads\/sites\/6\/2026\/08\/Untitled-design-8.png","contentUrl":"https:\/\/proskurnya.com\/es\/wp-content\/uploads\/sites\/6\/2026\/08\/Untitled-design-8.png","width":260,"height":260,"caption":"Kyrylo Proskurnya"},"logo":{"@id":"https:\/\/proskurnya.com\/es\/#\/schema\/person\/image\/"},"sameAs":["https:\/\/proskurnya.com"],"url":"https:\/\/proskurnya.com\/es\/author\/proskurnya-admin\/"}]}},"_links":{"self":[{"href":"https:\/\/proskurnya.com\/es\/wp-json\/wp\/v2\/posts\/92","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/proskurnya.com\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/proskurnya.com\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/proskurnya.com\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/proskurnya.com\/es\/wp-json\/wp\/v2\/comments?post=92"}],"version-history":[{"count":0,"href":"https:\/\/proskurnya.com\/es\/wp-json\/wp\/v2\/posts\/92\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/proskurnya.com\/es\/wp-json\/wp\/v2\/media\/52"}],"wp:attachment":[{"href":"https:\/\/proskurnya.com\/es\/wp-json\/wp\/v2\/media?parent=92"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/proskurnya.com\/es\/wp-json\/wp\/v2\/categories?post=92"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/proskurnya.com\/es\/wp-json\/wp\/v2\/tags?post=92"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}