Conceção de um serviço integrado de avaliação da gestão e proteção de dados

• Autor(a) principal: José António Casanova Monteiro
• Data de Publicação: 2020
• Tipo de documento: Dissertação
• Idioma: por
• Título da fonte: Repositório Científico de Acesso Aberto de Portugal (Repositórios Cientìficos)
• Texto Completo: https://hdl.handle.net/10216/129883
• topic: Ciências da comunicação; Media and communications

The recently published General Data Protection Regulation (GDPR) launched new challenges for information systems, for either software houses and users companies using those same information systems. The protection of data owners is a fundamental right of individuals and now with a legal frame at European level duly adjusted. This dissertation studies the challenges that the GDPR raised on the management information systems commonly operating in the organizations and proposes some answers. The method is the case analysis of the Sistrade® MIS | ERP in its various modules: Administrative & Financial, Commercial & Budget Management, Production Management, Stock & Purchasing Management, and WEB Management Solutions. Initially, the assessment is carried out by identifying processes in each of the modules and mapping the data processings performed. Follows an assessment of the risk each of those data processings poses to the protection of personal data, conducing to a global impact assessment of the several modules in the system. Subsequently, and working from the weaknesses identified in the system, some suggestions are made in order to mitigate the risks of data breaches. An audit process is also specified in which some questions are raised in relation to the data processings carried out, and some report models are suggested that may help to the compliance of the system's own implementations. In summary, this dissertation allowed an analysis of data protection in Sistrade® MIS | ERP, and giving some hints for the fulfillment of the new requirements of the GDPR.