Políticas de segurança física e lógica de tecnologia da informação em redes de computadores e seus ativos

Abstract

This study applied to information security for business environments is to create a security policy for computer network environments and their assets. The objective is to describe the physical and logical security guidelines for companies that use information technology equipment, ensuring the security, integrity and image of an organization. During the research, the risks and vulnerabilities are addressed in the absence of established norms and rules, the use of the security policy in organizations as well as the implementation instructions. During the research, it is mentioned the norms and responsibilities, the criteria used in the analysis of information technology professionals in identifying risks and probabilities of cyber-attacks as well as the use of social engineering in order to obtain information and privileged access.