Análise e gestão de riscos aplicada à segurança da informação

Abstract

The use of technology in all areas of knowledge has become essential, and the high traffic of data has made it imperative to work within the highest standards of security. Considering all the existing risks, an efficient risk management and analysis is of extreme importance for the three pillars of security (guarantee of reliability, integrity and availability) to be always present and respected. For this, it is necessary that constant and thorough analyses are carried out, in order to verify possible vulnerabilities (physical and logical) that can eventually become tangible and intangible losses for an organization. Failures in critical systems directly impact an organization, therefore, preventive measures, security controls, constant checks and continuous improvements are indispensable points. This work aims to propose a methodology for the analysis and initiatives in the management of risks within an organization, providing a detailed documentation of an effective risk management and analysis plan.