Gestão da segurança da informação em colégios: uma análise da utilização da norma NBR ISO/IEC 17799

Abstract

In a globalized world, competitive, and with increasing advances in the area of technology of communications and computer science, the information is presented in all the areas and sectors of an organization. Thus, to the organizations, the information started to be one of the main involved assets in the success of business, needing to be protected its trustworthy, integrity and availability. The present dissertation presents a study on the Information Security Management in schools, detaching the most important aspects for occasion of the implementation of security controls based on Norm NBR ISO/IEC 17799 (Information technology – Code of pratice for information for information security management) in the security management of information connected in resources of Information Technology (IT). As result this dissertation presents: (i) a study about the Norm NBR ISO/IEC 17799; (ii) a known methodology for implementation of the same one and that it involves stages as the confection of Politics of Security and the construction of a Matrix of Analysis of Risks; (iii) the time and the costs for the fulfilment of each stage of the methodology proposal; (iv) which had been the costs involved in the human resources, and (v) which had been the critical points for the success of the work.