This research shows the analysis of multiple factors that inhibit the implementation of an Information Security Management System (ISMS). The research data were collected from 143 respondents from two universities in northeastern Mexico, in faculties of engineering in related areas. In this study, the Information Security Management System Measurement Instrument (IM-ISMS) was validated. A scale of 24 items was obtained, divided into four factors: organizational policies and regulations, privacy, integrity and authenticity. The results of this study agree with the results found by [10] in which they pre-sent a model that complies with ISO/IEC 27002:2013 controls and security and privacy criteria to improve the ISMS. [48], Mentioned that the implementation of controls based on ISO standards can meet the requirements for cybersecurity best practices.A scale of 24 items was obtained, divided into four factors: organizational policies and regulations, privacy, integrity and authenticity. This version of the instrument meets the criteria established for its validity (KMO, Bartlett's test of sphericity). An extraction was performed by the minimum residuals method, an oblique rotation was performed by the promax method, when performing the rotation 17 of the 24 items were grouped in the corresponding factor. The final reliability of the scale was calculated by the Omega coefficient, in all the dimensions the coefficients were greater than .70, therefore the re-liability of the instrument is good.

翻译：本研究分析了阻碍信息安全管理体系（ISMS）实施的多重因素。研究数据来自墨西哥东北部两所大学工程相关领域的143名受访者。本研究对信息安全管理体系测量工具（IM-ISMS）进行了验证。获得了一个包含24个题项的量表，分为四个因子：组织政策与规章、隐私、完整性和真实性。本研究结果与文献[10]的发现一致，该文献提出了一种符合ISO/IEC 27002:2013控制项及安全与隐私准则以改进ISMS的模型。文献[48]指出，基于ISO标准的控制措施实施可满足网络安全最佳实践的要求。该24题项量表分为四个因子：组织政策与规章、隐私、完整性和真实性。本版本工具满足效度建立标准（KMO、巴特利特球形检验）。采用最小残差法进行因子提取，使用promax法进行斜交旋转。旋转后，24个题项中有17个归入对应因子。量表最终信度通过Omega系数计算，所有维度的系数均大于0.70，表明工具信度良好。