Cultura de segurança da informação: um processo de mudança organizacional na Petrobrás

• Autor(a) principal: Vieira, Patrícia dos Santos
• Data de Publicação: 2009
• Tipo de documento: Dissertação
• Idioma: por
• Título da fonte: Repositório Institucional do FGV (FGV Repositório Digital)
• Texto Completo: http://hdl.handle.net/10438/4242
• topic: Cultura de segurança da informação; Mudança organizacional; Gestão da mudança; Information security culture; Change management; Organizational change; Administração de empresas; Desenvolvimento organizacional - Estudo de casos; Sistemas de informação gerencial - Medidas de segurança - Estudo de casos; Cultura organizacional - Estudo de casos

This study aims to verify whether and to what degree the criteria proposed by Kotter to the implantation of an information security culture were attended at Petrobras. Petrobras, for several years, was an oil country-wide state company. As in several other companies, with the internationalization process, more players with interests in valuable information started interacting with the company. The necessity of conducting a change management process to implant an information security culture was verified. The model defined by Kotter has eight steps that, if followed, guarantee a successful change. In order to achieve the study’s purpose, bibliographic research and Petrobras’ files and documents research and field research were done. The period of study was from 2002 until 2009. The process evaluation has shown some fails at the steps defined by Kotter. It is possible to mention: high complacency; sense of urgency attributed only in the first moment; long-term vision was not widely declared; the reason of change was not explicit throughout time; information security organization structure in the fields is still deficient; there was not complete alignment of the company’s management systems; the existence of structures and systems that make the evaluation of the actions and the recognition of the people involved in the cultural change process more difficult; and lack of worrying in commemorating short-term achievements.