Um estudo de caso sobre a gestão da segurança da informação em uma organização pública

• Autor(a) principal: Oliveira, Fábio Amaro
• Data de Publicação: 2014
• Tipo de documento: Trabalho de conclusão de curso
• Idioma: por
• Título da fonte: Repositório Institucional da UFLA
• Texto Completo: http://repositorio.ufla.br/jspui/handle/1/30723
• topic: Política de segurança da informação; Normas ABNT ISO/IEC DA SÉRIE 27000; Análise CIDAL; Information security policy; Standards ISO / IEC 27000 SERIES; Analysis CIDAL; Não

The development of the information security policy is a strategic advantage for organizations that are concerned with the information, technologies that support this information, people, processes and the environment as a whole and want to care for a security incident does not occur with any of these assets. In this paper a case study on the management of information security in a public company is presented, which is the 6th Co. Ind MAT, facility owned by the Military Police of Minas Gerais. The aim of the study was to develop a security policy information from the standards ISO / IEC 27000 SERIES, analysis CIDAL and vulnerabilities related to information assets. If approved by the top management of the organization, the policy should be published and disseminated throughout its domestic audience, both for tactical and operational part, showing that it is necessary to worry about information security at all times.