Security policies for mobile devices in the management of information in SMEs

Abstract

Introduction. Currently mobile devices provide great advantages for information management, if they are used within a company, it becomes a versatile tool, but, as well as offering advantages, there is also the other side in terms of security as it must maintain integrity, confidentiality, and availability of information. Knowing that in Ecuador approximately 4.39% are SMEs and that in Riobamba almost 354 are, and since there is no mobile culture in the organization of the company, it is necessary to implement strategies that promote the correct use of mobile devices to support business activity. Objective. Improve security in SMEs by implementing security policies on mobile devices for the safe handling of information. Methodology. A SWOT analysis was carried out where the strengths and weaknesses of the company with respect to the management of information through mobile devices were identified, processes were established from the surveys carried out to the members of the company, the necessary security policies were drawn up to solve the shortcomings that arose, the policies developed were implemented and the validity and effectiveness of these policies in the company was verified. Results. The implemented policies increased the integrity of the data transmission through mobile devices, it went from 13.64% to 86.36%, the confidentiality of the data to 36.36% since before the application of the policies it did not exist, availability was obtained 18.18% on mobile devices, since previously information was obtained from these. Conclusion. The security policies on mobile devices for the safe handling of the information shared with the personnel allowed the improvement in the security of the company according to its initial situation.