Estudo de caso: Política de segurança e utilização de recursos da informação em uma empresa de médio porte

Abstract

One of biggest concern on business world today is to ensure data and information security, due to high number of hackers, stolen data, cyber-crimes, virus propagation, crackers e so many other factors that may intervene on mechanism security of their assets. This case study “IT resource utilization policy” has as goal to identify and assess Information Security Management System of PARANACIDADE, entity that has as mission to provide services to Parana State, as well to suggest implementation and execution of controls that may ensure information security in accordance of policy already in use by the company, also in accordance of NBR ISO/IEC 27001 and 27002 of 2006 regulation intended for information security. It was applied a questionnaire for company employees, in order to verify knowledge and engagement about this issue, for an efficient application with information protection satisfactory results. Founded on obtained results and in accordance to theme research, it was outlined enhancements proposal to be implemented, as attempt to ensure an effective application of Information Security Policy.