Análise dos recursos de segurança, do nível de conhecimento sobre riscos e uso de tecnologias por pequenas e médias empresas

Abstract

This study investigates information security, cyber-risk awareness, and the use of technology by small and medium-sized enterprises (SMEs) in the city of Bandeirantes - PR. In an environment increasingly shaped by digital transformation and rising cyber incidents, understanding how these organizations manage digital threats is essential for their continuity and competitiveness. A structured questionnaire was applied, based on best practices and guidelines from ISO/IEC 27001 and 27002, covering technical, operational, and behavioral aspects of information security. The collected data were analyzed to identify patterns, critical vulnerabilities, and gaps in the implementation of protection mechanisms. The findings reveal limited investment in formal security policies, low employee training levels, and weaknesses in risk management. As a result, this study proposes practical and accessible recommendations focused on technology, processes, and awareness, contributing to strengthening security culture and supporting SMEs in adopting feasible preventive measures.